First published: Mon Dec 11 2006(Updated: )
The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Xerox WorkCentre | <=13.050.02.000 | |
Xerox WorkCentre | <=14.050.02.000 | |
Xerox WorkCentre | <=13.050.02.000 | |
Xerox WorkCentre | <=14.050.02.000 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-6472 is considered to have an unknown impact and potential remote attack vectors due to improper configuration.
To fix CVE-2006-6472, update your Xerox WorkCentre or WorkCentre Pro device to the latest firmware version that addresses this vulnerability.
CVE-2006-6472 affects Xerox WorkCentre and WorkCentre Pro versions prior to 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000.
The risks of CVE-2006-6472 include unauthorized access and potential exploitation due to the always active port 443.
You can determine if your Xerox device is vulnerable to CVE-2006-6472 by checking the firmware version against the affected versions listed in the vulnerability description.