CVE-2013-6362 Hardcoded credentials in n/a
Hardcoded FTP and shell accounts in Xerox devices allow attackers to gain unauthorized access and potentially execute code.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-6362?
CVE-2013-6362 is a critical vulnerability in n/a, published on 13 Feb 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
Weakness: CWE-798
Which versions are affected by CVE-2013-6362?
It affects 12 products.
Products include Xerox Colorqube 9201 Firmware, Xerox Colorqube 9202 Firmware, Xerox Colorqube 9203 Firmware, Xerox Workcentre 6400 Firmware, Xerox Workcentre 7525 Firmware, Xerox Workcentre 7530 Firmware and 6 more.
How do I fix CVE-2013-6362?
No fix has been published for CVE-2013-6362 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-6362 being exploited?
There is no known exploitation of CVE-2013-6362 in the wild and no public exploit code.
Sources
Also known as GHSA-fx74-5px9-49w4.