PT-2009-4140 · Xerox · Xerox Workcentre Pro+1

Publicado 2009-05-16 · Atualizado 2017-08-17 · CVE-2009-1656

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Xerox WorkCentre and WorkCentre Pro versions 232, 238, 245, 255, 265, 275 Xerox WorkCentre versions 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, 7675

Description: The issue allows remote attackers to execute arbitrary commands via unknown attack vectors, which is described as a command injection vulnerability.

Recommendations: For Xerox WorkCentre and WorkCentre Pro versions 232, 238, 245, 255, 265, 275, and WorkCentre versions 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, 7675, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2009-1656

Produtos afetados

Xerox Workcentre

Xerox Workcentre Pro

Referências · 8

• http://securitytracker.com/id?1022238 · Nota
• http://securityfocus.com/bid/34984 · Nota
• http://vupen.com/english/advisories/2009/1328 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50558 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1656 · Nota de Segurança
• http://secunia.com/advisories/35101 · Aviso do Fabricante
• http://osvdb.org/54457 · Nota
• http://xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdf · Aviso do Fabricante