Critical severity9.8NVD Advisory· Published Apr 29, 2020· Updated Jun 17, 2026
CVE-2016-11061
CVE-2016-11061
Description
Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.
Affected products
27- cpe:2.3:o:xerox:workcentre_3655_firmware:*:*:*:*:*:*:*:*Range: <073.060.086.15410
- cpe:2.3:o:xerox:workcentre_3655i_firmware:*:*:*:*:*:*:*:*Range: <073.060.086.15410
- cpe:2.3:o:xerox:workcentre_5865_firmware:*:*:*:*:*:*:*:*Range: <073.190.086.15410
- cpe:2.3:o:xerox:workcentre_5865i_firmware:*:*:*:*:*:*:*:*Range: <073.190.086.15410
- cpe:2.3:o:xerox:workcentre_5875_firmware:*:*:*:*:*:*:*:*Range: <073.190.086.15410
- cpe:2.3:o:xerox:workcentre_5875i_firmware:*:*:*:*:*:*:*:*Range: <073.190.086.15410
- cpe:2.3:o:xerox:workcentre_5890_firmware:*:*:*:*:*:*:*:*Range: <073.190.086.15410
- cpe:2.3:o:xerox:workcentre_5890i_firmware:*:*:*:*:*:*:*:*Range: <073.190.086.15410
- cpe:2.3:o:xerox:workcentre_5945_firmware:*:*:*:*:*:*:*:*Range: <073.091.086.15410
- cpe:2.3:o:xerox:workcentre_5945i_firmware:*:*:*:*:*:*:*:*Range: <073.091.086.15410
- cpe:2.3:o:xerox:workcentre_5955_firmware:*:*:*:*:*:*:*:*Range: <073.091.086.15410
- cpe:2.3:o:xerox:workcentre_5955i_firmware:*:*:*:*:*:*:*:*Range: <073.091.086.15410
- cpe:2.3:o:xerox:workcentre_6655_firmware:*:*:*:*:*:*:*:*Range: <073.110.086.15410
- cpe:2.3:o:xerox:workcentre_6655i_firmware:*:*:*:*:*:*:*:*Range: <073.110.086.15410
- cpe:2.3:o:xerox:workcentre_7200_firmware:*:*:*:*:*:*:*:*Range: <073.030.086.15410
- cpe:2.3:o:xerox:workcentre_7200i_firmware:*:*:*:*:*:*:*:*Range: <073.030.086.15410
- cpe:2.3:o:xerox:workcentre_7220_firmware:*:*:*:*:*:*:*:*Range: <073.030.086.15410
- cpe:2.3:o:xerox:workcentre_7225_firmware:*:*:*:*:*:*:*:*Range: <073.030.086.15410
- cpe:2.3:o:xerox:workcentre_7225i_firmware:*:*:*:*:*:*:*:*Range: <073.030.086.15410
- cpe:2.3:o:xerox:workcentre_7830_firmware:*:*:*:*:*:*:*:*Range: <073.010.086.15410
- cpe:2.3:o:xerox:workcentre_7835_firmware:*:*:*:*:*:*:*:*Range: <073.010.086.15410
- cpe:2.3:o:xerox:workcentre_7845_firmware:*:*:*:*:*:*:*:*Range: <073.010.086.15410
- cpe:2.3:o:xerox:workcentre_7855_firmware:*:*:*:*:*:*:*:*Range: <073.010.086.15410
- cpe:2.3:o:xerox:workcentre_7970_firmware:*:*:*:*:*:*:*:*Range: <073.200.086.15410
- cpe:2.3:o:xerox:workcentre_7970i_firmware:*:*:*:*:*:*:*:*Range: <073.200.086.15410
- Xerox/WorkCentredescription
- Range: <073.xxx.086.15410
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.