CVE-2006-6435
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The SNMP implementation in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 does not generate authentication failure traps, which allows remote attackers to more easily gain system access and obtain sensitive information via a brute force attack.
La implementación SNMP en Xerox WorkCentre y WorkCentre Pro anterior 12.050.03.000, 13.x anterior 13.050.03.000, y 14.x anterior 14.050.03.000 no genera validación de fallos de trampa, lo cual permite a atacantes remotos, mas facilemente, ganar accesos en el sistema y obtener información sensible a través de ataques por fuerza bruta.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-12-09 CVE Reserved
- 2006-12-10 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-15 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf | 2008-09-10 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/23265 | 2008-09-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Xerox Search vendor "Xerox" | Workcentre Search vendor "Xerox" for product "Workcentre" | 12.060.17.000 Search vendor "Xerox" for product "Workcentre" and version "12.060.17.000" | - |
Affected
| ||||||
| Xerox Search vendor "Xerox" | Workcentre Search vendor "Xerox" for product "Workcentre" | 12.060.17.000 Search vendor "Xerox" for product "Workcentre" and version "12.060.17.000" | pro |
Affected
| ||||||
| Xerox Search vendor "Xerox" | Workcentre Search vendor "Xerox" for product "Workcentre" | 13.060.17.000 Search vendor "Xerox" for product "Workcentre" and version "13.060.17.000" | - |
Affected
| ||||||
| Xerox Search vendor "Xerox" | Workcentre Search vendor "Xerox" for product "Workcentre" | 13.060.17.000 Search vendor "Xerox" for product "Workcentre" and version "13.060.17.000" | pro |
Affected
| ||||||
| Xerox Search vendor "Xerox" | Workcentre Search vendor "Xerox" for product "Workcentre" | 14.060.17.000 Search vendor "Xerox" for product "Workcentre" and version "14.060.17.000" | - |
Affected
| ||||||
| Xerox Search vendor "Xerox" | Workcentre Search vendor "Xerox" for product "Workcentre" | 14.060.17.000 Search vendor "Xerox" for product "Workcentre" and version "14.060.17.000" | pro |
Affected
| ||||||