VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 10, 2006· Updated Jun 16, 2026

CVE-2006-6430

CVE-2006-6430

Description

Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic.

Affected products

13
  • Xerox/Workcentre 2754 versions
    cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:h:xerox:workcentre_232:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_232:*:*:pro:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_275:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*
  • Xerox/Workcentre 2382 versions
    cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_238:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_238:*:*:pro:*:*:*:*:*
  • Xerox/Workcentre 2452 versions
    cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_245:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_245:*:*:pro:*:*:*:*:*
  • Xerox/Workcentre 2552 versions
    cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:xerox:workcentre_255:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_255:*:*:pro:*:*:*:*:*
  • Xerox/Workcentre3 versions
    cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:h:xerox:workcentre_265:*:*:*:*:*:*:*:*
    • cpe:2.3:h:xerox:workcentre_265:*:*:pro:*:*:*:*:*
    • (no CPE)range: <12.060.17.000, <13.060.17.000, <14.060.17.000

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.