9.8
CVSS 3.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
Описание
Оригинално описание
Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.
Засегнати продукти
- XEROX AltaLink B8045/B8055/B8065/B8075/B8090: unspecified до 101.008.008.27400
- XEROX AltaLink C8030/C8035/C8045/C8055/C8070: unspecified до 101.001.008.27400
- XEROX WorkCentre 3655: unspecified до 073.060.075.34540
- XEROX WorkCentre 5845/5855/5865/5875/5890: unspecified до 073.190.075.34540
- XEROX WorkCentre 5945/5955: unspecified до 073.091.075.34540
- XEROX WorkCentre 6655: unspecified до 073.110.075.34540
- XEROX WorkCentre 7220/7225: unspecified до 073.030.075.34540
- XEROX WorkCentre 7830/7835/7845/7855: unspecified до 073.010.075.34540
- XEROX WorkCentre 7970: unspecified до 073.200.075.34540
- XEROX WorkCentre EC7836/EC7856: unspecified до 073.020.167.17200
- XEROX ColorQube 9301/9302/9303: unspecified преди 072.xxx.009.07200
- XEROX ColorQube 8700/8900: unspecified преди 072.xxx.009.07200
- XEROX WorkCentre 6400: unspecified до 061.070.100.24201
- XEROX Phaser 6700: unspecified до 081.140.103.22600
- XEROX Phaser 7800: unspecified до 081.150.103.05600
- XEROX WorkCentre 5735/5740/5745/5755/5765/5775/5790: unspecified до 061.132.221.21403
- XEROX WorkCentre 7525/7530/7535/7545/7556: unspecified до 061.121.224.18803
- XEROX WorkCentre 7755/7765/7775: unspecified до 061.090.220.19700
Вид слабост
История
- 12 април 2019 Публикувано