ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-11061

—
CVSS 3.1
9.8 critical
EPSS
2%p79
Published
()
Modified
Description

Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.

Vendors
xerox
Products
workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5865 firmware, workcentre 5875 firmware, workcentre 5890 firmware, workcentre 5865i firmware, workcentre 5875i firmware, workcentre 5890i firmware, workcentre 5945 firmware, workcentre 5955 firmware, workcentre 5945i firmware, workcentre 5955i firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news

No ingested article mentions this CVE yet.