CVE-2010-0548

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or (2) read device configuration information via via unknown vectors that bypass web server authorization.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/38139	Vendor Advisory
http://www.vupen.com/english/advisories/2010/0209	Vendor Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf	Patch Vendor Advisory
http://secunia.com/advisories/38139	Vendor Advisory
http://www.vupen.com/english/advisories/2010/0209	Vendor Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:xerox:workcentre_5632::::::::
	cpe:2.3:h:xerox:workcentre_5638::::::::
	cpe:2.3:h:xerox:workcentre_5645::::::::
	cpe:2.3:h:xerox:workcentre_5655::::::::
	cpe:2.3:h:xerox:workcentre_5665::::::::
	cpe:2.3:h:xerox:workcentre_5675::::::::
	cpe:2.3:h:xerox:workcentre_5687::::::::

History

21 Nov 2024, 01:12

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/38139 - Vendor Advisory~~	() http://secunia.com/advisories/38139 - Vendor Advisory
References	~~() http://www.vupen.com/english/advisories/2010/0209 - Vendor Advisory~~	() http://www.vupen.com/english/advisories/2010/0209 - Vendor Advisory
References	~~() http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf - Patch, Vendor Advisory~~	() http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf - Patch, Vendor Advisory

Information

Published : 2010-02-04 20:15

Updated : 2024-11-21 01:12

NVD link : CVE-2010-0548

Mitre link : CVE-2010-0548

CVE.ORG link : CVE-2010-0548

JSON object : View

Products Affected

xerox

workcentre_5638
workcentre_5645
workcentre_5687
workcentre_5675
workcentre_5632
workcentre_5655
workcentre_5665

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2010-0548", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-02-04T20:15:50.000", "references": [{"url": "http://secunia.com/advisories/38139", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/0209", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/38139", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/0209", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or (2) read device configuration information via via unknown vectors that bypass web server authorization."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades no especificadas en Network Controller y Web Server en Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, y 5687 permite a atacantes remotos (1) acceso a los buzones de correo a trav\u00e9s de vectores no especificados que evitan el Scan en la autorizaci\u00f3n del Buz\u00f3n de Correo o (2) leer informaci\u00f3n de configuraci\u00f3n del dispotivo a trav\u00e9s de vectores desconocidos que evitan la autorizaci\u00f3n del servidor web."}], "lastModified": "2024-11-21T01:12:25.447", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:xerox:workcentre_5632:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "528EC6CB-50EE-4C37-8E10-2F017102897E"}, {"criteria": "cpe:2.3:h:xerox:workcentre_5638:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C44E7506-9CB2-4D1D-812C-AA30A2DFEFCC"}, {"criteria": "cpe:2.3:h:xerox:workcentre_5645:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEE8A674-E5AE-42E4-9F3D-52F6B16047DE"}, {"criteria": "cpe:2.3:h:xerox:workcentre_5655:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5911BA62-23F6-4B08-898B-98BB5572CCBB"}, {"criteria": "cpe:2.3:h:xerox:workcentre_5665:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C7BA313-1A4B-43E1-867B-EAD3E079AFE0"}, {"criteria": "cpe:2.3:h:xerox:workcentre_5675:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AD4C828-C565-4944-8406-94920C94264C"}, {"criteria": "cpe:2.3:h:xerox:workcentre_5687:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F91ADACB-C192-4533-ABF6-AED6CF41D4D0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}