CVE-2002-1834: Medium severity Xerox DocuTech 6110 vulnerability
The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server and (1) submit print jobs directly into the "print now" queue or (2) read the scanner job history.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to the Xerox DocuTech 6110 and Xerox DocuTech 6115 web server: block access to the device web/management port at the perimeter firewall and allow only trusted management IP addresses.
- Compensating control
Place Xerox DocuTech 6110 and Xerox DocuTech 6115 on an isolated management/printing VLAN with no direct Internet access and enforce network ACLs so only authorized internal hosts can submit print jobs or access scanner job history.
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1834?
CVE-2002-1834 is considered a high severity vulnerability due to the potential for unauthorized access to printer resources.
How do I fix CVE-2002-1834?
To fix CVE-2002-1834, reconfigure the Xerox DocuTech 6110 and 6115 to restrict access to the web server and limit job submissions to authenticated users.
Which devices are affected by CVE-2002-1834?
CVE-2002-1834 affects the Xerox DocuTech 6110 and DocuTech 6115 devices.
What attacks can be executed due to CVE-2002-1834?
CVE-2002-1834 allows remote attackers to submit unauthorized print jobs and view the scanner job history.
Is there a patch for CVE-2002-1834?
There is no official patch for CVE-2002-1834, but remedial actions involve adjusting the configuration of the affected devices.