Fuji.Xerox.DocuCentre.Printer.Command.Injection

Description

This indicates an attack attempt to exploit a Command Injection Vulnerability in Xerox DocuCentre.
The vulnerability is due to an input validation error while parsing a crafted request. A remote attacker could exploit this to retrieve information and execute arbitrary commands, via a crafted request.

Affected Products

DocuCentre-V 3065
ApeosPort-VI C3371
ApeosPort-V C4475
ApeosPort-V C3375
DocuCentre-VI C2271
ApeosPort-V C5576
DocuCentre-IV C2263
DocuCentre-V C2263
ApeosPort-V 5070

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch available for this issue

References