CVE-2006-6430
Estado: ModificadaAlta (7.8)—
Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.56%
- Percentil entre todas las CVEs puntuadas: 74
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (6)
CWE
- NVD-CWE-Other
Referencias
- http://secunia.com/advisories/23265
- http://www.securityfocus.com/bid/21365
- http://www.vupen.com/english/advisories/2006/4791
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30679
- http://secunia.com/advisories/23265
- http://www.securityfocus.com/bid/21365
- http://www.vupen.com/english/advisories/2006/4791
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30679
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-6430",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-12-10T11:28:00.000",
"references": [
{
"url": "http://secunia.com/advisories/23265",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/21365",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/4791",
"source": "cve@mitre.org"
},
{
"url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30679",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/23265",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/21365",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/4791",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30679",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic."
},
{
"lang": "es",
"value": "Servicios Web en Xerox WorkCentre y WorkCentre Pro anterior 12.060.17.000, 13.x anterior 13.060.17.000, y 14.x anterior 14.060.17.000 no requiere HTTPS, lo cual permite a un atacante remoto obtener información sensible a través de sniffing del tráfico no encriptado HTTP."
}
],
"lastModified": "2026-06-16T22:33:07.037",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24E761E4-0B6C-4C2A-BFCA-4CFC5620E91C"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74245D08-446A-4988-BCFD-85509C4CE340"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12790FD1-DECA-4074-9458-3F88823190EF"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88E2F705-B185-4211-B0CC-1E295E5B4471"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D7FE90B-21E6-4628-AD70-37BB9644CBD9"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "573640FF-609D-4441-B7DD-3477F239A00E"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8204B5C0-0B87-48BD-9678-5101B048C135"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A2128EF-5847-4097-84BC-5CAC270F1C10"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAE44F85-3F9A-45FC-A411-1D1B4C2E33D7"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8FD8F59-E229-4138-9B85-7E15A80CF5DD"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92119B14-94C5-4D3D-811E-EB7336E39F3E"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DC671C6-7444-4E3D-ACAB-8905A0DB40CB"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}