CVE-2010-0549
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorized Directory Structure Access Vulnerability."
Vulnerabilidad no especifica en el Network Controller en Xerox WorkCentre 6400 System Software v060.070.109.11407 hasta v060.070.109.29510, y Net Controller v060.079.11410 hasta v060.079.29310, permite a atacantse remotos acceder al "directorio de estructura" a través de un archivo PostScript manipulado, como "Vulnerabilidad no autorizada al Directorio de Estrucutra."
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-02-04 CVE Reserved
- 2010-02-04 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id?1023500 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.xerox.com/downloads/usa/en/c/cert_XRX10-001_v1.0.pdf | 2011-01-06 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/38339 | 2011-01-06 | |
| http://www.vupen.com/english/advisories/2010/0208 | 2011-01-06 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Xerox Search vendor "Xerox" | Workcentre 6400 Net Controller Search vendor "Xerox" for product "Workcentre 6400 Net Controller" | 060.079.11410 Search vendor "Xerox" for product "Workcentre 6400 Net Controller" and version "060.079.11410" | - |
Affected
| ||||||
| Xerox Search vendor "Xerox" | Workcentre 6400 Net Controller Search vendor "Xerox" for product "Workcentre 6400 Net Controller" | 060.079.29310 Search vendor "Xerox" for product "Workcentre 6400 Net Controller" and version "060.079.29310" | - |
Affected
| ||||||
| Xerox Search vendor "Xerox" | Workcentre 6400 System Software Search vendor "Xerox" for product "Workcentre 6400 System Software" | 060.070.109.11407 Search vendor "Xerox" for product "Workcentre 6400 System Software" and version "060.070.109.11407" | - |
Affected
| ||||||
| Xerox Search vendor "Xerox" | Workcentre 6400 System Software Search vendor "Xerox" for product "Workcentre 6400 System Software" | 060.070.109.29510 Search vendor "Xerox" for product "Workcentre 6400 System Software" and version "060.070.109.29510" | - |
Affected
| ||||||