CVE-2010-0548

Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687 - Unauthenticated Exposure of Sensitive Information

Title source: llm

Description

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or (2) read device configuration information via via unknown vectors that bypass web server authorization.

References (3)

Core 3

Core References

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2010/0209

Patch, Vendor Advisory x_refsource_confirm

http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/38139

Scores

EPSS 0.0197

EPSS Percentile 78.0%

Details

CWE

CWE-200

Status published

Products (7)

xerox/workcentre_5632

xerox/workcentre_5638

xerox/workcentre_5645

xerox/workcentre_5655

xerox/workcentre_5665

xerox/workcentre_5675

xerox/workcentre_5687

Published Feb 04, 2010

Tracked Since Feb 18, 2026