{"cve":"CVE-2005-0703","nvd":{"published":"2005-03-07T05:00:00.000","modified":"2026-06-16T22:11:36.950","status":"Modified","description":"Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, has an \"unauthenticated account,\" which allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-1179.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["http://secunia.com/advisories/14507","http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf","http://secunia.com/advisories/14507","http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf"],"products":["xerox:workcentre_165","xerox:workcentre_175","xerox:workcentre_2128","xerox:workcentre_2636","xerox:workcentre_32_color","xerox:workcentre_35","xerox:workcentre_3545","xerox:workcentre_40_color","xerox:workcentre_45","xerox:workcentre_55","xerox:workcentre_65","xerox:workcentre_75","xerox:workcentre_90","xerox:workcentre_m165","xerox:workcentre_m175","xerox:workcentre_m35","xerox:workcentre_m45","xerox:workcentre_m55"],"source":"nvd","synced_at":"2026-10-19T19:38:22.000386253+00:00"},"epss":{"cve":"CVE-2005-0703","score":0.01041,"percentile":0.6404,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}