vulnwire
6.4med

CVE-2006-2113

The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn a…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
6.4
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.9%
percentile 80%
Public exploits
0
none known

The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, does not properly perform authentication for HTTP requests, which allows remote attackers to modify system configuration via crafted requests, including changing the administrator password or causing a denial of service to the print server.

Exploit prediction (EPSS)

1.93% probability of exploitation in the next 30 days, higher than 80% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.4AV:N/AC:L/Au:N/C:N/I:P/A:P

Classification

Weakness

References

  • vupen.com /english/advisories/2006/3401 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/19716 · vdb-entry, x_refsource_BID, x_transferred
  • osvdb.org /28250 · vdb-entry, x_refsource_OSVDB, x_transferred
  • secunia.com /advisories/21630 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • marc.info /?l=bugtraq&m=115652437223454&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • itso.iu.edu /20060824_FXPS_Print_Engine_Vulnerabilities · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/444321/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/22463 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.