CVE-2006-6427 - CVE House
Back to Database
Status published High CVE-2006-6427

The Web User Interface in Xerox WorkCentre and WorkCentre Pro...

Vulnerability Description

The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6427

Credits & Attribution

No credits recorded in the NVD database.

References

More from xerox

View All →
CVE-2022-45897
On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can...
Unknown 0
CVE-2022-26572
Xerox ColorQube 8580 was discovered to contain an access control...
High 7.5
CVE-2022-23968
Xerox VersaLink devices on specific versions of firmware before 2022-01-26...
High 7.5
CVE-2022-23321
A persistent cross-site scripting (XSS) vulnerability exists on two input...
Medium 4.8
CVE-2022-23320
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based...
High 7.5

Affected Vendor

Affected Software

workcentre
Vulnerable Versions:
12.060.17.000, 13.060.17.000, 14.060.17.000

Timeline

Official Publish: December 10th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.