CVE-2006-6433: Medium severity Xerox WorkCentre vulnerability

Published Dec 10, 2006

Updated

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record accurate timestamps, which makes it easier for remote attackers to avoid detection when an audit tries to rely on these timestamps.

Affected Software

6 affected components

Xerox WorkCentre=12.060.17.000

Xerox WorkCentre=13.060.17.000

Xerox WorkCentre=14.060.17.000

Remediation

Patch Available

http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf

Event History

Dec 10, 2006

CVE Published

11:28 AM

Data Sourced

via NVD·11:28 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-6433?

CVE-2006-6433 is considered a medium severity vulnerability due to the risk of evasion of detection in audits.

How do I fix CVE-2006-6433?

To fix CVE-2006-6433, you should update your Xerox WorkCentre or WorkCentre Pro device to the latest firmware version provided by Xerox.

What devices are affected by CVE-2006-6433?

CVE-2006-6433 affects Xerox WorkCentre models 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000.

What does CVE-2006-6433 exploit?

CVE-2006-6433 exploits incorrect timestamp recording, enabling attackers to avoid detection during audits.

Is CVE-2006-6433 a common vulnerability in Xerox devices?

CVE-2006-6433 is specific to certain versions of Xerox WorkCentre devices and is not widely applicable to all Xerox products.