CVE-2006-2113
Medium
Description
The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, does not properly perform authentication for HTTP requests, which allows remote attackers to modify system configuration via crafted requests, including changing the administrator password or causing a denial of service to the print server.
SeverityMedium
CVSS6.4
Exploit probability—
ProductDell 3000cn
PublishedAug 25, 2006
First seenAug 25, 2006
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell 3000cn | No range specified | — |
| dell 3010cn | No range specified | — |
| dell 3100cn | No range specified | — |
| dell 3110cn | No range specified | — |
| dell 5100cn | No range specified | — |
| dell 5110cn | No range specified | — |
| fuji_xerox docuprint_181 | No range specified | — |
| fuji_xerox docuprint_181_network_option_card | No range specified | — |
| fuji_xerox docuprint_211 | No range specified | — |
| fuji_xerox docuprint_211_network_option_card | No range specified | — |
| fuji_xerox docuprint_c1616 | No range specified | — |
| fuji_xerox docuprint_c1616_network_option_card | No range specified | — |
| fuji_xerox docuprint_c2535a | No range specified | — |
| fuji_xerox docuprint_c525a | No range specified | — |
| fuji_xerox docuprint_c525a_network_option_card | No range specified | — |
| fuji_xerox docuprint_c830 | No range specified | — |
| fuji_xerox docuprint_c830_network_option_card | No range specified | — |
| fuji_xerox fuji_xerox_printing_systems_print_engine | No range specified | — |
| fuji_xerox phaser_6201j | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.