CVEvulnerability
CVE-2006-6427
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-78
Description
The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290.
Affected configurations
• xerox workcentre 12.060.17.000
• xerox workcentre 13.060.17.000
• xerox workcentre 14.060.17.000
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://secunia.com/advisories/23265 Vendor Advisory
- http://securitytracker.com/id?1017337 Vendor Advisory
- http://www.securityfocus.com/bid/21365 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4791 Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf Patch
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_007_v1.pdf www.xerox.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30674 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/23265 Vendor Advisory
- http://securitytracker.com/id?1017337 Vendor Advisory
- http://www.securityfocus.com/bid/21365 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4791 Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf Patch
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_007_v1.pdf www.xerox.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30674 exchange.xforce.ibmcloud.com