VulnerabilityModified
CVE-2006-6472
The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors.
HIGH 10.0EPSS 1.35%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 1.35% probability · 70th percentile
- CISA KEV
- Not listed
- Affected
- xerox/workcentre
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/23265Patch, Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdfVendor Advisory
- http://secunia.com/advisories/23265Patch, Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdfVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.