CVE-2005-1936 Auth bypass in n/a

High 7.5 Published Updated

Attackers can gain unauthorized access to the web server of Xerox Document Centre devices via an unknown vulnerability.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Over the internet
Victim action needed
Not stated
Fix
None listed

What is CVE-2005-1936?

CVE-2005-1936 is a high-severity authentication bypass vulnerability in n/a, published on 12 Jun 2005. It can be exploited over the network.

Official description

Unknown vulnerability in the web server for the ESS/ Network Controller for Xerox Document Centre 240 through 555 running System Software 27.18.017 and earlier allows attackers to "gain unauthorized access."

Which versions are affected by CVE-2005-1936?

It affects 20 products.

Products include Xerox Document Centre 220, Xerox Document Centre 230, Xerox Document Centre 240, Xerox Document Centre 255, Xerox Document Centre 265, Xerox Document Centre 332 and 14 more.

How do I fix CVE-2005-1936?

No fix has been published for CVE-2005-1936 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2005-1936 being exploited?

There is no known exploitation of CVE-2005-1936 in the wild and no public exploit code.

Sources

Also known as GHSA-9g8c-7jw5-c5h9.

Is CVE-2005-1936 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free