A vulnerability has been reported in Xerox ESS/Network Controller, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an unspecified error within the Samba code when handling Remote Service Message Block (SMB) responses. This can be exploited to execute arbitrary code by sending specially crafted messages to a vulnerable system.

The vulnerability is reported in the following products:
WorkCentre: 232, 238, 245, 255, 265, 275, 7655, 7665, 7675, 5623, 5635, 5645, 5655, 5665, 5675, and 5687
WorkCentre Pro: 232, 238, 245, 255, 265, and 275

Solution
Apply patch P36v1 (see vendor's advisory for patch matrix).
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf

Deep Links
Links available in Customer Area