Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2016-11061 Details

Description

Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://securitydocs.business.xerox.com/wp-content/uploads/2016/10/cert_Mini_Security_Bulletin_XRX16Q_for_ConnectKey_R16-05_v1-1-2.pdf	CVE	Vendor Advisory
https://securitydocs.business.xerox.com/wp-content/uploads/2016/10/cert_Mini_Security_Bulletin_XRX16Q_for_ConnectKey_R16-05_v1-1-2.pdf	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-78	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	[email protected]

Affected Products

Product	Versions
xerox workcentre 3655 firmware	< 073.060.086.15410
CPE cpe:2.3:o:xerox:workcentre_3655_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 3655	All versions
CPE cpe:2.3:h:xerox:workcentre_3655:-:::::::* Remediation No remediation found in references.
xerox workcentre 3655i firmware	< 073.060.086.15410
CPE cpe:2.3:o:xerox:workcentre_3655i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 3655i	All versions
CPE cpe:2.3:h:xerox:workcentre_3655i:-:::::::* Remediation No remediation found in references.
xerox workcentre 5865 firmware	< 073.190.086.15410
CPE cpe:2.3:o:xerox:workcentre_5865_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5865	All versions
CPE cpe:2.3:h:xerox:workcentre_5865:-:::::::* Remediation No remediation found in references.
xerox workcentre 5875 firmware	< 073.190.086.15410
CPE cpe:2.3:o:xerox:workcentre_5875_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5875	All versions
CPE cpe:2.3:h:xerox:workcentre_5875:-:::::::* Remediation No remediation found in references.
xerox workcentre 5890 firmware	< 073.190.086.15410
CPE cpe:2.3:o:xerox:workcentre_5890_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5890	All versions
CPE cpe:2.3:h:xerox:workcentre_5890:-:::::::* Remediation No remediation found in references.
xerox workcentre 5865i firmware	< 073.190.086.15410
CPE cpe:2.3:o:xerox:workcentre_5865i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5865i	All versions
CPE cpe:2.3:h:xerox:workcentre_5865i:-:::::::* Remediation No remediation found in references.
xerox workcentre 5875i firmware	< 073.190.086.15410
CPE cpe:2.3:o:xerox:workcentre_5875i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5875i	All versions
CPE cpe:2.3:h:xerox:workcentre_5875i:-:::::::* Remediation No remediation found in references.
xerox workcentre 5890i firmware	< 073.190.086.15410
CPE cpe:2.3:o:xerox:workcentre_5890i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5890i	All versions
CPE cpe:2.3:h:xerox:workcentre_5890i:-:::::::* Remediation No remediation found in references.
xerox workcentre 5945 firmware	< 073.091.086.15410
CPE cpe:2.3:o:xerox:workcentre_5945_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5945	All versions
CPE cpe:2.3:h:xerox:workcentre_5945:-:::::::* Remediation No remediation found in references.
xerox workcentre 5955 firmware	< 073.091.086.15410
CPE cpe:2.3:o:xerox:workcentre_5955_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5955	All versions
CPE cpe:2.3:h:xerox:workcentre_5955:-:::::::* Remediation No remediation found in references.
xerox workcentre 5945i firmware	< 073.091.086.15410
CPE cpe:2.3:o:xerox:workcentre_5945i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5945i	All versions
CPE cpe:2.3:h:xerox:workcentre_5945i:-:::::::* Remediation No remediation found in references.
xerox workcentre 5955i firmware	< 073.091.086.15410
CPE cpe:2.3:o:xerox:workcentre_5955i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 5955i	All versions
CPE cpe:2.3:h:xerox:workcentre_5955i:-:::::::* Remediation No remediation found in references.
xerox workcentre 6655 firmware	< 073.110.086.15410
CPE cpe:2.3:o:xerox:workcentre_6655_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 6655	All versions
CPE cpe:2.3:h:xerox:workcentre_6655:-:::::::* Remediation No remediation found in references.
xerox workcentre 6655i firmware	< 073.110.086.15410
CPE cpe:2.3:o:xerox:workcentre_6655i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 6655i	All versions
CPE cpe:2.3:h:xerox:workcentre_6655i:-:::::::* Remediation No remediation found in references.
xerox workcentre 7200 firmware	< 073.030.086.15410
CPE cpe:2.3:o:xerox:workcentre_7200_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7200	All versions
CPE cpe:2.3:h:xerox:workcentre_7200:-:::::::* Remediation No remediation found in references.
xerox workcentre 7200i firmware	< 073.030.086.15410
CPE cpe:2.3:o:xerox:workcentre_7200i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7200i	All versions
CPE cpe:2.3:h:xerox:workcentre_7200i:-:::::::* Remediation No remediation found in references.
xerox workcentre 7225i firmware	< 073.030.086.15410
CPE cpe:2.3:o:xerox:workcentre_7225i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7225i	All versions
CPE cpe:2.3:h:xerox:workcentre_7225i:-:::::::* Remediation No remediation found in references.
xerox workcentre 7830 firmware	< 073.010.086.15410
CPE cpe:2.3:o:xerox:workcentre_7830_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7830	All versions
CPE cpe:2.3:h:xerox:workcentre_7830:-:::::::* Remediation No remediation found in references.
xerox workcentre 7835 firmware	< 073.010.086.15410
CPE cpe:2.3:o:xerox:workcentre_7835_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7835	All versions
CPE cpe:2.3:h:xerox:workcentre_7835:-:::::::* Remediation No remediation found in references.
xerox workcentre 7845 firmware	< 073.010.086.15410
CPE cpe:2.3:o:xerox:workcentre_7845_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7845	All versions
CPE cpe:2.3:h:xerox:workcentre_7845:-:::::::* Remediation No remediation found in references.
xerox workcentre 7855 firmware	< 073.010.086.15410
CPE cpe:2.3:o:xerox:workcentre_7855_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7855	All versions
CPE cpe:2.3:h:xerox:workcentre_7855:-:::::::* Remediation No remediation found in references.
xerox workcentre 7970 firmware	< 073.200.086.15410
CPE cpe:2.3:o:xerox:workcentre_7970_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7970	All versions
CPE cpe:2.3:h:xerox:workcentre_7970:-:::::::* Remediation No remediation found in references.
xerox workcentre 7970i firmware	< 073.200.086.15410
CPE cpe:2.3:o:xerox:workcentre_7970i_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7970i	All versions
CPE cpe:2.3:h:xerox:workcentre_7970i:-:::::::* Remediation No remediation found in references.
xerox workcentre 7225 firmware	< 073.030.086.15410
CPE cpe:2.3:o:xerox:workcentre_7225_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7225	All versions
CPE cpe:2.3:h:xerox:workcentre_7225:-:::::::* Remediation No remediation found in references.
xerox workcentre 7220 firmware	< 073.030.086.15410
CPE cpe:2.3:o:xerox:workcentre_7220_firmware:::::::: Remediation No remediation found in references.
xerox workcentre 7220	All versions
CPE cpe:2.3:h:xerox:workcentre_7220:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
May 6, 2020	Initial Analysis	[email protected]

CVE-2016-11061 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation