Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-6472


The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors.


Published

2006-12-11T18:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware xerox workcentre ≤ 13.050.02.000 Yes
Hardware xerox workcentre ≤ 13.050.02.000 Yes
Hardware xerox workcentre ≤ 14.050.02.000 Yes
Hardware xerox workcentre ≤ 14.050.02.000 Yes

References