Description
Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
XEROX AltaLink B8045/B8055/B8065/B8075/B8090
unspecified to ≤ 101.008.008.27400unknown
XEROX AltaLink C8030/C8035/C8045/C8055/C8070
unspecified to ≤ 101.001.008.27400unknown
XEROX WorkCentre 3655
unspecified to ≤ 073.060.075.34540unknown
XEROX WorkCentre 5845/5855/5865/5875/5890
unspecified to ≤ 073.190.075.34540unknown
XEROX WorkCentre 5945/5955
unspecified to ≤ 073.091.075.34540unknown
XEROX WorkCentre 6655
unspecified to ≤ 073.110.075.34540unknown
XEROX WorkCentre 7220/7225
unspecified to ≤ 073.030.075.34540unknown
XEROX WorkCentre 7830/7835/7845/7855
unspecified to ≤ 073.010.075.34540unknown
XEROX WorkCentre 7970
unspecified to ≤ 073.200.075.34540unknown
XEROX WorkCentre EC7836/EC7856
unspecified to ≤ 073.020.167.17200unknown
XEROX ColorQube 9301/9302/9303
unspecified to < 072.xxx.009.07200affected
XEROX ColorQube 8700/8900
unspecified to < 072.xxx.009.07200affected
XEROX WorkCentre 6400
unspecified to ≤ 061.070.100.24201unknown
XEROX Phaser 6700
unspecified to ≤ 081.140.103.22600unknown
XEROX Phaser 7800
unspecified to ≤ 081.150.103.05600unknown
XEROX WorkCentre 5735/5740/5745/5755/5765/5775/5790
unspecified to ≤ 061.132.221.21403unknown
XEROX WorkCentre 7525/7530/7535/7545/7556
unspecified to ≤ 061.121.224.18803unknown
XEROX WorkCentre 7755/7765/7775
unspecified to ≤ 061.090.220.19700unknown