CVE-2006-5290 | BDVDB-2026-19734 Detail

Description#

The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/22252
http://www.securityfocus.com/bid/20334/info
https://exchange.xforce.ibmcloud.com/vulnerabilities/29357
http://securitytracker.com/id?1016981
http://www.vupen.com/english/advisories/2006/3921
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_005.pdf

Exploit#

No public exploit known

History#

Version 12006-10-13Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.