CVE-2016-11061

Published Apr 29, 2020 CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Description
Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2016-2050 Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.
History

No history.

Subscriptions

Xerox Workcentre 3655 Workcentre 3655 Firmware Workcentre 3655i Workcentre 3655i Firmware Workcentre 5865 Workcentre 5865 Firmware Workcentre 5865i Workcentre 5865i Firmware Workcentre 5875 Workcentre 5875 Firmware Workcentre 5875i Workcentre 5875i Firmware Workcentre 5890 Workcentre 5890 Firmware Workcentre 5890i Workcentre 5890i Firmware Workcentre 5945 Workcentre 5945 Firmware Workcentre 5945i Workcentre 5945i Firmware Workcentre 5955 Workcentre 5955 Firmware Workcentre 5955i Workcentre 5955i Firmware Workcentre 6655 Workcentre 6655 Firmware Workcentre 6655i Workcentre 6655i Firmware Workcentre 7200 Workcentre 7200 Firmware Workcentre 7200i Workcentre 7200i Firmware Workcentre 7220 Workcentre 7220 Firmware Workcentre 7225 Workcentre 7225 Firmware Workcentre 7225i Workcentre 7225i Firmware Workcentre 7830 Workcentre 7830 Firmware Workcentre 7835 Workcentre 7835 Firmware Workcentre 7845 Workcentre 7845 Firmware Workcentre 7855 Workcentre 7855 Firmware Workcentre 7970 Workcentre 7970 Firmware Workcentre 7970i Workcentre 7970i Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 3:47 AM
Reserved
Apr 29, 2020, 12:00 AM
Status
Modified
Published
Apr 29, 2020, 10:15 PM
Modified
Jun 17, 2026, 12:40 AM