Xerox WorkCentre Multiple Authentication Bypass Vulnerabilities

Bugtraq ID:	37921
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 22 2010 12:00AM
Updated:	Feb 22 2010 04:21PM
Credit:	Daniel Fabian of SEC Consult
Vulnerable:	Xerox WorkCentre 5687 Xerox WorkCentre 5675 Xerox WorkCentre 5665 Xerox WorkCentre 5655 Xerox WorkCentre 5645 Xerox WorkCentre 5638 Xerox WorkCentre 5632
Not Vulnerable:

Xerox WorkCentre Multiple Authentication Bypass Vulnerabilities

Multiple Xerox WorkCentre devices are prone to multiple authentication-bypass vulnerabilities.

Attackers can exploit these issues to obtain sensitive information that may aid in further attacks.

The following are vulnerable:

WorkCentre 5632
WorkCentre 5638
WorkCentre 5645
WorkCentre 5655
WorkCentre 5665
WorkCentre 5675
WorkCentre 5687

Xerox WorkCentre Multiple Authentication Bypass Vulnerabilities

Attackers can exploit these issues using readily available tools.

Xerox WorkCentre Multiple Authentication Bypass Vulnerabilities

References:

• [2010-02-08] Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Inter (SEC Consult)
  
• Xerox Homepage (Xerox)
  
• SEC Consult SA-20100208-0 :: Backdoor and Vulnerabilities in Xerox WorkCentre Pr (SEC Consult Research )
  
• Xerox Security Bulletin XRX10-002 (Xerox)