VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 13, 2006· Updated Jun 16, 2026

CVE-2006-5290

CVE-2006-5290

Description

The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Xerox/Workcentre 2754 versions
    cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*
  • Xerox/Workcentre 2382 versions
    cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*
  • Xerox/Workcentre 2452 versions
    cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*
  • Xerox/Workcentre 2552 versions
    cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*
  • Xerox/Workcentre3 versions
    cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.