CVE-2006-6427

no score yetEPSS 2.9%

xerox workcentre: no CVSS score yet. EPSS 2.9% chance of exploitation in the next 30 days.

The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290.

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2006-12-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xerox:workcentre

References

http://secunia.com/advisories/23265
http://securitytracker.com/id?1017337
http://www.securityfocus.com/bid/21365
http://www.vupen.com/english/advisories/2006/4791
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf

Check your stack JSON