CVE Feed

    Dashboard / CVE / CVE-2013-6362

    CVE-2013-6362

    Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.

    Published:Feb 13, 2020
    Last Modified:Nov 21, 2024
    EPS:Feb 13, 2020
    EPSS Score:0.00451
    CVSS Score:9.8

    Affected Products

    Vendor
    Xerox
    Product
    Colorqube 9201
    Vendor
    Xerox
    Product
    Colorqube 9201 Firmware
    Vendor
    Xerox
    Product
    Colorqube 9202
    Vendor
    Xerox
    Product
    Colorqube 9202 Firmware
    Vendor
    Xerox
    Product
    Colorqube 9203
    Vendor
    Xerox
    Product
    Colorqube 9203 Firmware
    Vendor
    Xerox
    Product
    Workcentre 6400
    Vendor
    Xerox
    Product
    Workcentre 6400 Firmware
    Vendor
    Xerox
    Product
    Workcentre 7525
    Vendor
    Xerox
    Product
    Workcentre 7525 Firmware
    Vendor
    Xerox
    Product
    Workcentre 7530
    Vendor
    Xerox
    Product
    Workcentre 7530 Firmware
    Vendor
    Xerox
    Product
    Workcentre 7535
    Vendor
    Xerox
    Product
    Workcentre 7535 Firmware
    Vendor
    Xerox
    Product
    Workcentre 7545
    Vendor
    Xerox
    Product
    Workcentre 7545 Firmware
    Vendor
    Xerox
    Product
    Workcentre 7556
    Vendor
    Xerox
    Product
    Workcentre 7556 Firmware
    Vendor
    Xerox
    Product
    Workcentre 7755
    Vendor
    Xerox
    Product
    Workcentre 7755 Firmware
    Vendor
    Xerox
    Product
    Workcentre 7765
    Vendor
    Xerox
    Product
    Workcentre 7765 Firmware
    Vendor
    Xerox
    Product
    Workcentre 7775
    Vendor
    Xerox
    Product
    Workcentre 7775 Firmware

    Exploits

    http://firmware.re/usenixsec14/http://firmware.re/vulns/acsa-2013-005.phphttp://firmware.re/usenixsec14/http://firmware.re/vulns/acsa-2013-005.php

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High