VulnerabilityModified

CVE-2006-1138

Unspecified vulnerability in the web server code in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allows remote attackers to cause a denial of service (memory corruption) via…

MEDIUM 5.0EPSS 3.23%

Does this matter?

Lower severity and a low EPSS score (3.23%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 3.23% probability · 88th percentile
CISA KEV: Not listed
Affected: xerox/copycentre c65 firmware · xerox/copycentre c75 firmware · xerox/copycentre c90 firmware · xerox/workcentre pro 65 firmware · xerox/workcentre pro 75 firmware · xerox/workcentre pro 90 firmware
Source: cve@mitre.org

References

http://secunia.com/advisories/19146Third Party Advisory
http://securitytracker.com/id?1015738Third Party Advisory, VDB Entry
http://www.osvdb.org/23727Broken Link
http://www.securityfocus.com/bid/17014Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2006/0857Permissions Required, Third Party Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdfBroken Link, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25175Third Party Advisory, VDB Entry
http://secunia.com/advisories/19146Third Party Advisory
http://securitytracker.com/id?1015738Third Party Advisory, VDB Entry
http://www.osvdb.org/23727Broken Link
http://www.securityfocus.com/bid/17014Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2006/0857Permissions Required, Third Party Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdfBroken Link, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25175Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.