CVE-2005-0703 - CVE House
Back to Database
Status published Medium CVE-2005-0703

Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55...

Vulnerability Description

Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, has an "unauthenticated account," which allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-1179.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-0703

Credits & Attribution

No credits recorded in the NVD database.

References

More from xerox

View All →
CVE-2022-45897
On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can...
Unknown 0
CVE-2022-26572
Xerox ColorQube 8580 was discovered to contain an access control...
High 7.5
CVE-2022-23968
Xerox VersaLink devices on specific versions of firmware before 2022-01-26...
High 7.5
CVE-2022-23321
A persistent cross-site scripting (XSS) vulnerability exists on two input...
Medium 4.8
CVE-2022-23320
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based...
High 7.5

Affected Vendor

Affected Software

workcentre 165, workcentre 175, workcentre 2128, workcentre 2636, workcentre 32 color, workcentre 35, workcentre 3545, workcentre 40 color, workcentre 45, workcentre 55, workcentre 65, workcentre 75, workcentre 90, workcentre m165, workcentre m175, workcentre m35, workcentre m45, workcentre m55
Vulnerable Versions:
7.47.30.000, 7.47.33.008, 0.001.04.044, 0.001.00.060, 0.001.02.081, 3.028.11.000, 3.97.20.032, 1.001.00.060, 1.001.02.084, 6.47.30.000, 6.47.33.008, 8.47.30.000, 8.47.33.008, 2.28.11.000, 2.97.20.032, 4.84.16.000

Timeline

Official Publish: March 9th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.