CVE-2006-2113

Severity Score

6.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, does not properly perform authentication for HTTP requests, which allows remote attackers to modify system configuration via crafted requests, including changing the administrator password or causing a denial of service to the print server.

El servidor HTTP incrustado en el motor de impresión Fuji Xerox Printing Systems (FXPS), como se usa en productos incluyendo (1) Dell 3000cn hasta la versión 5110cn y (2) firmware Fuji Xerox DocuPrint en versiones anteriores a 20060628 y firmware Network Option Card en versiones anteriores a 5.13, no realiza correctamente autenticación para peticiones HTTP, lo que permite a atacantes remotos modificar la configuración del sistema a través de peticiones manipuladas, incluyendo el cambio de la contraseña de administrador o provocando una denegación de servicio al servidor de impresión.

*Credits: N/A

CVSS Scores

NISTv2 6.4

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-05-01 CVE Reserved
2006-08-25 CVE Published
2024-01-17 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-287: Improper Authentication

CAPEC

References (8)

URL	Tag	Source
http://marc.info/?l=bugtraq&m=115652437223454&w=2	Mailing List
http://secunia.com/advisories/21630	Third Party Advisory
http://www.osvdb.org/28250	Vdb Entry
http://www.securityfocus.com/archive/1/444321/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/19716	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities	2018-10-18

URL	Date	SRC
http://secunia.com/advisories/22463	2018-10-18
http://www.vupen.com/english/advisories/2006/3401	2018-10-18

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Dell Search vendor "Dell"		3000cn Search vendor "Dell" for product "3000cn"				*		-		Affected
Dell Search vendor "Dell"		3010cn Search vendor "Dell" for product "3010cn"				*		-		Affected
Dell Search vendor "Dell"		3100cn Search vendor "Dell" for product "3100cn"				*		-		Affected
Dell Search vendor "Dell"		3110cn Search vendor "Dell" for product "3110cn"				*		-		Affected
Dell Search vendor "Dell"		5100cn Search vendor "Dell" for product "5100cn"				*		-		Affected
Dell Search vendor "Dell"		5110cn Search vendor "Dell" for product "5110cn"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint 181 Search vendor "Fuji Xerox" for product "Docuprint 181"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint 181 Network Option Card Search vendor "Fuji Xerox" for product "Docuprint 181 Network Option Card"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint 211 Search vendor "Fuji Xerox" for product "Docuprint 211"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint 211 Network Option Card Search vendor "Fuji Xerox" for product "Docuprint 211 Network Option Card"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint C1616 Search vendor "Fuji Xerox" for product "Docuprint C1616"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint C1616 Network Option Card Search vendor "Fuji Xerox" for product "Docuprint C1616 Network Option Card"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint C2535a Search vendor "Fuji Xerox" for product "Docuprint C2535a"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint C525a Search vendor "Fuji Xerox" for product "Docuprint C525a"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint C525a Network Option Card Search vendor "Fuji Xerox" for product "Docuprint C525a Network Option Card"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint C830 Search vendor "Fuji Xerox" for product "Docuprint C830"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Docuprint C830 Network Option Card Search vendor "Fuji Xerox" for product "Docuprint C830 Network Option Card"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Fuji Xerox Printing Systems Print Engine Search vendor "Fuji Xerox" for product "Fuji Xerox Printing Systems Print Engine"				*		-		Affected
Fuji Xerox Search vendor "Fuji Xerox"		Phaser 6201j Search vendor "Fuji Xerox" for product "Phaser 6201j"				*		-		Affected