Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or (2) read device configuration information via via unknown vectors that bypass web server authorization.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.vupen.com/english/advisories/2010/0209 | vdb entry vendor advisory |
http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf | patch vendor advisory |
http://secunia.com/advisories/38139 | third party advisory vendor advisory |