CVE-2006-6434
Estado: ModificadaAlta (7.5)—
Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to bypass authentication controls via unknown vectors.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.38%
- Percentil entre todas las CVEs puntuadas: 71
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (6)
CWE
- NVD-CWE-Other
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-6434",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-12-10T11:28:00.000",
"references": [
{
"url": "http://secunia.com/advisories/23265",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/23265",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to bypass authentication controls via unknown vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en Web User Interface en Xerox WorkCentre y WorkCentre Pro anterior 12.050.03.000, 13.x anterior 13.050.03.000, y 14.x anterior 14.050.03.000 permite a un atacante remoto evitar los controles de validación a través de vectores desconocidos."
}
],
"lastModified": "2026-06-16T22:33:07.460",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24E761E4-0B6C-4C2A-BFCA-4CFC5620E91C"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74245D08-446A-4988-BCFD-85509C4CE340"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12790FD1-DECA-4074-9458-3F88823190EF"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88E2F705-B185-4211-B0CC-1E295E5B4471"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D7FE90B-21E6-4628-AD70-37BB9644CBD9"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "573640FF-609D-4441-B7DD-3477F239A00E"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8204B5C0-0B87-48BD-9678-5101B048C135"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A2128EF-5847-4097-84BC-5CAC270F1C10"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAE44F85-3F9A-45FC-A411-1D1B4C2E33D7"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8FD8F59-E229-4138-9B85-7E15A80CF5DD"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92119B14-94C5-4D3D-811E-EB7336E39F3E"
},
{
"criteria": "cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DC671C6-7444-4E3D-ACAB-8905A0DB40CB"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}