« Volver al listado

CVE-2010-0548

Estado: ModificadaMedia (5)—

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or (2) read device configuration information via via unknown vectors that bypass web server authorization.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Xerox — Workcentre 5632Xerox — Workcentre 5638Xerox — Workcentre 5645Xerox — Workcentre 5655Xerox — Workcentre 5665Xerox — Workcentre 5675Xerox — Workcentre 5687

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0548",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-02-04T20:15:50.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/38139",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/0209",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/38139",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/0209",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX10-002_v1.0.pdf",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or (2) read device configuration information via via unknown vectors that bypass web server authorization."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades no especificadas en Network Controller y Web Server en Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, y 5687 permite a atacantes remotos (1) acceso a los buzones de correo a través de vectores no especificados que evitan el Scan en la autorización del Buzón de Correo o (2) leer información de configuración del dispotivo a través de vectores desconocidos que evitan la autorización del servidor web."
    }
  ],
  "lastModified": "2026-06-16T23:16:22.950",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_5632:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "528EC6CB-50EE-4C37-8E10-2F017102897E"
            },
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_5638:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C44E7506-9CB2-4D1D-812C-AA30A2DFEFCC"
            },
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_5645:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEE8A674-E5AE-42E4-9F3D-52F6B16047DE"
            },
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_5655:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5911BA62-23F6-4B08-898B-98BB5572CCBB"
            },
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_5665:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C7BA313-1A4B-43E1-867B-EAD3E079AFE0"
            },
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_5675:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AD4C828-C565-4944-8406-94920C94264C"
            },
            {
              "criteria": "cpe:2.3:h:xerox:workcentre_5687:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F91ADACB-C192-4533-ABF6-AED6CF41D4D0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}