CVE-2006-6432: Medium severity Xerox WorkCentre vulnerability

Published Dec 10, 2006

Updated

Unspecified vulnerability in the Scan-to-mailbox feature in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to download certain files via unspecified vectors.

Affected Software

6 affected components

Xerox WorkCentre=12.060.17.000

Xerox WorkCentre=13.060.17.000

Xerox WorkCentre=14.060.17.000

Remediation

Patch Available

http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf

Event History

Dec 10, 2006

CVE Published

11:28 AM

Data Sourced

via NVD·11:28 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-6432?

CVE-2006-6432 is considered to be a moderate risk vulnerability due to the potential for remote file downloads.

How do I fix CVE-2006-6432?

To mitigate CVE-2006-6432, it is recommended to upgrade the Xerox WorkCentre devices to the latest firmware versions 12.060.17.000, 13.060.17.000, or 14.060.17.000.

What products are affected by CVE-2006-6432?

CVE-2006-6432 affects Xerox WorkCentre models prior to firmware versions 12.060.17.000, 13.060.17.000, and 14.060.17.000.

Can CVE-2006-6432 be exploited remotely?

Yes, CVE-2006-6432 allows remote attackers to exploit the vulnerability through unspecified vectors.

What are the potential consequences of CVE-2006-6432?

The exploitation of CVE-2006-6432 could lead to unauthorized access to sensitive files on the affected Xerox WorkCentre devices.