Lucene search
MitreCVE-2006-5290HistoryOct 13, 2006 - 8:07 p.m.
CVE-2006-5290
2006-10-1320:07:00
mitre
web.nvd.nist.gov
24
xerox
workcentre
workcentre pro
remote code execution
authentication bypass
webui
tcp/ip
cve-2006-5290
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.3
Confidence
Low
EPSS
0.09
Percentile
94.7%
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via “WebUI command injection on TCP/IP hostname.”
Affected configurations
Node
xeroxworkcentre_232
ORxeroxworkcentre_232pro
ORxeroxworkcentre_238
ORxeroxworkcentre_238pro
ORxeroxworkcentre_245
ORxeroxworkcentre_245pro
ORxeroxworkcentre_255
ORxeroxworkcentre_255pro
ORxeroxworkcentre_265
ORxeroxworkcentre_265pro
ORxeroxworkcentre_275
ORxeroxworkcentre_275pro
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xerox | workcentre_232 | * | cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:* |
| xerox | workcentre_232 | * | cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:* |
| xerox | workcentre_238 | * | cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:* |
| xerox | workcentre_238 | * | cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:* |
| xerox | workcentre_245 | * | cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:* |
| xerox | workcentre_245 | * | cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:* |
| xerox | workcentre_255 | * | cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:* |
| xerox | workcentre_255 | * | cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:* |
| xerox | workcentre_265 | * | cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:* |
| xerox | workcentre_265 | * | cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:* |
Related
nessus
nessus
Xerox WorkCentre WebUI Arbitrary Command Execution (XRX06-005)
2006-10-05 00:00:00
nvd
nvd
CVE-2006-5290
2006-10-13 20:07:00
CVE-2006-6427
2006-12-10 11:28:00
cvelist
cvelist
CVE-2006-5290
2006-10-13 20:00:00
CVE-2006-6427
2006-12-10 11:00:00
cve
cve
CVE-2006-6427
2006-12-10 11:28:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.3
Confidence
Low
EPSS
0.09
Percentile
94.7%
Related for CVE-2006-5290