Multiple Xerox device Authentication Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Xerox WorkCentre
Xerox ColorQube 9300
Xerox ColorQube 9200
Description:
--------------------------------------------------------------------------------
Bugtraq id: 58289
 
Xerox is an American copywriting management and processing technology company that provides printers, photocopiers, digital printing equipment, and related services and consumables.
 
Xerox ColorQube, WorkCentre, and WorkCentre Pro do not properly implement access permission restriction operations implemented through certain protocols. Security Vulnerabilities exist in the implementation, remote attackers can exploit this vulnerability to bypass the authentication mechanism and obtain unauthorized access permissions.
 
<* Source: vendor

Link: http://secunia.com/advisories/52496/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Xerox
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.xerox.com
Http://www.xerox.com/download/security/security-bulletin/1b480-4c596f3916140/cert_XRX12-005_v1.031.pdf