CVE-2016-11061
Summary
| CVE | CVE-2016-11061 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-29 22:15:00 UTC |
| Updated | 2020-05-06 15:01:00 UTC |
| Description | Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Xerox | Workcentre 3655 | - | All | All | All |
| Hardware | Xerox | Workcentre 3655 | - | All | All | All |
| Hardware | Xerox | Workcentre 3655i | - | All | All | All |
| Hardware | Xerox | Workcentre 3655i | - | All | All | All |
| Operating System | Xerox | Workcentre 3655i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 3655i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 3655 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 3655 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 5865 | - | All | All | All |
| Hardware | Xerox | Workcentre 5865 | - | All | All | All |
| Hardware | Xerox | Workcentre 5865i | - | All | All | All |
| Hardware | Xerox | Workcentre 5865i | - | All | All | All |
| Operating System | Xerox | Workcentre 5865i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5865i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5865 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5865 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 5875 | - | All | All | All |
| Hardware | Xerox | Workcentre 5875 | - | All | All | All |
| Hardware | Xerox | Workcentre 5875i | - | All | All | All |
| Hardware | Xerox | Workcentre 5875i | - | All | All | All |
| Operating System | Xerox | Workcentre 5875i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5875i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5875 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5875 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 5890 | - | All | All | All |
| Hardware | Xerox | Workcentre 5890 | - | All | All | All |
| Hardware | Xerox | Workcentre 5890i | - | All | All | All |
| Hardware | Xerox | Workcentre 5890i | - | All | All | All |
| Operating System | Xerox | Workcentre 5890i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5890i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5890 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5890 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 5945 | - | All | All | All |
| Hardware | Xerox | Workcentre 5945 | - | All | All | All |
| Hardware | Xerox | Workcentre 5945i | - | All | All | All |
| Hardware | Xerox | Workcentre 5945i | - | All | All | All |
| Operating System | Xerox | Workcentre 5945i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5945i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5945 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5945 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 5955 | - | All | All | All |
| Hardware | Xerox | Workcentre 5955 | - | All | All | All |
| Hardware | Xerox | Workcentre 5955i | - | All | All | All |
| Hardware | Xerox | Workcentre 5955i | - | All | All | All |
| Operating System | Xerox | Workcentre 5955i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5955i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5955 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 5955 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 6655 | - | All | All | All |
| Hardware | Xerox | Workcentre 6655 | - | All | All | All |
| Hardware | Xerox | Workcentre 6655i | - | All | All | All |
| Hardware | Xerox | Workcentre 6655i | - | All | All | All |
| Operating System | Xerox | Workcentre 6655i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 6655i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 6655 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 6655 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 7200 | - | All | All | All |
| Hardware | Xerox | Workcentre 7200 | - | All | All | All |
| Hardware | Xerox | Workcentre 7200i | - | All | All | All |
| Hardware | Xerox | Workcentre 7200i | - | All | All | All |
| Operating System | Xerox | Workcentre 7200i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7200i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7200 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7200 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 7220 | - | All | All | All |
| Hardware | Xerox | Workcentre 7220 | - | All | All | All |
| Operating System | Xerox | Workcentre 7220 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7220 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 7225 | - | All | All | All |
| Hardware | Xerox | Workcentre 7225 | - | All | All | All |
| Hardware | Xerox | Workcentre 7225i | - | All | All | All |
| Hardware | Xerox | Workcentre 7225i | - | All | All | All |
| Operating System | Xerox | Workcentre 7225i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7225i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7225 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7225 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 7830 | - | All | All | All |
| Hardware | Xerox | Workcentre 7830 | - | All | All | All |
| Operating System | Xerox | Workcentre 7830 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7830 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 7835 | - | All | All | All |
| Hardware | Xerox | Workcentre 7835 | - | All | All | All |
| Operating System | Xerox | Workcentre 7835 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7835 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 7845 | - | All | All | All |
| Hardware | Xerox | Workcentre 7845 | - | All | All | All |
| Operating System | Xerox | Workcentre 7845 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7845 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 7855 | - | All | All | All |
| Hardware | Xerox | Workcentre 7855 | - | All | All | All |
| Operating System | Xerox | Workcentre 7855 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7855 Firmware | All | All | All | All |
| Hardware | Xerox | Workcentre 7970 | - | All | All | All |
| Hardware | Xerox | Workcentre 7970 | - | All | All | All |
| Hardware | Xerox | Workcentre 7970i | - | All | All | All |
| Hardware | Xerox | Workcentre 7970i | - | All | All | All |
| Operating System | Xerox | Workcentre 7970i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7970i Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7970 Firmware | All | All | All | All |
| Operating System | Xerox | Workcentre 7970 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| securitydocs.business.xerox.com/wp-content/uploads/2016/10/cert_Mini_Security_Bulletin_XRX16Q... | MISC | securitydocs.business.xerox.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.