Secunia

Multiple vulnerabilities have been reported in Xerox MicroServer Web Server, which can be exploited by malicious people to bypass the user authentication.

The vulnerabilities are caused due to the existence of an unauthenticated user account in the web server code and some unspecified errors in the SNMP authentication. This can be exploited to gain unauthorised access and modify the system configuration.

The following products are affected:
* WorkCentre M35/M45/M55 (versions 2.028.11.000 through 2.97.20.032 and versions 4.84.16.000 through 4.97.20.032)
* WorkCentre M165/M175 (versions 6.47.30.000 through 6.47.33.008 and versions 8.47.30.000 through 8.47.33.008)
* WorkCentre Pro 35/45/55 (versions 3.028.11.000 through 3.97.20.032)
* WorkCentre Pro 65/75/90 (versions 1.001.00.060 through 1.001.02.084)
* WorkCentre Pro 32/40 Color (version 0.001.00.060 through 0.001.02.081)
* WorkCentre Pro 165/175 (versions 0.001.00.060 through 0.001.02.081)
* WorkCentre Pro Color 2128/2636/3545 (version 0.001.04.044)

Solution
Apply patch:
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
Xerox:
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf

Deep Links
Links available in Customer Area