← Database

CVE-2006-6430

HIGH CVSS: 7.8 Published: 2006-12-10 Modified: 2026-06-16

Description

Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic.

Affected Platforms

Xerox Workcentre 245Xerox Workcentre 238Xerox Workcentre 265Xerox Workcentre 275Xerox Workcentre 232Xerox Workcentre 255

Weakness Type

NVD-CWE-Other

References