Vulnerability Name:

CVE-2009-1656 (CCN-50558)

Assigned:2009-05-15
Published:2009-05-15
Updated:2017-08-17
Summary:Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2009-1656

Source: OSVDB
Type: UNKNOWN
54457

Source: CCN
Type: SA35101
Xerox WorkCentre Web Server Unspecified Command Injection

Source: SECUNIA
Type: Vendor Advisory
35101

Source: CCN
Type: SECTRACK ID: 1022238
Xerox WorkCentre Command Injection Bug Lets Remote Users Execute Arbitrary Code

Source: CCN
Type: OSVDB ID: 54457
XEROX WorkCentre Unspecified Arbitrary Command Execution

Source: BID
Type: UNKNOWN
34984

Source: CCN
Type: BID-34984
Xerox WorkCentre Webserver Unspecified Remote Command Execution Vulnerability

Source: SECTRACK
Type: UNKNOWN
1022238

Source: VUPEN
Type: Patch, Vendor Advisory
ADV-2009-1328

Source: CCN
Type: Xerox Security Bulletin XRX09-002
Software update to address Command Injection Vulnerability

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdf

Source: XF
Type: UNKNOWN
workcentre-unspecified-cmd-execution(50558)

Source: XF
Type: UNKNOWN
workcentre-unspecified-cmd-execution(50558)

Vulnerable Configuration:Configuration 1:
  • cpe:/h:xerox:workcentre:232:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:232:*:pro:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:238:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:238:*:pro:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:245:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:245:*:pro:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:255:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:255:*:pro:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:265:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:265:*:pro:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:275:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:275:pro:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5632:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5638:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5645:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5655:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5665:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5675:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5687:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:7655:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:7665:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:7675:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:xerox:workcentre_pro:232:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre_pro:238:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre_pro:245:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre_pro:255:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre_pro:265:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre_pro:275:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:245:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:255:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:265:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:7655:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:7665:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:7675:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5645:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5655:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5665:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5675:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5687:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5638:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:5632:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:232:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:238:*:*:*:*:*:*:*
  • OR cpe:/h:xerox:workcentre:275:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    xerox workcentre 232
    xerox workcentre 232
    xerox workcentre 238
    xerox workcentre 238
    xerox workcentre 245
    xerox workcentre 245
    xerox workcentre 255
    xerox workcentre 255
    xerox workcentre 265
    xerox workcentre 265
    xerox workcentre 275
    xerox workcentre 275 pro
    xerox workcentre 5632
    xerox workcentre 5638
    xerox workcentre 5645
    xerox workcentre 5655
    xerox workcentre 5665
    xerox workcentre 5675
    xerox workcentre 5687
    xerox workcentre 7655
    xerox workcentre 7665
    xerox workcentre 7675
    xerox workcentre pro 232
    xerox workcentre pro 238
    xerox workcentre pro 245
    xerox workcentre pro 255
    xerox workcentre pro 265
    xerox workcentre pro 275
    xerox workcentre 245
    xerox workcentre 255
    xerox workcentre 265
    xerox workcentre 7655
    xerox workcentre 7665
    xerox workcentre 7675
    xerox workcentre 5645
    xerox workcentre 5655
    xerox workcentre 5665
    xerox workcentre 5675
    xerox workcentre 5687
    xerox workcentre 5638
    xerox workcentre 5632
    xerox workcentre 232
    xerox workcentre 238
    xerox workcentre 275