Xerox Docutech 6110 vulnerabilities

4 CVEs affecting Xerox Docutech 6110, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-1836, published 2002-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-1833, published 2002-12-31. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of (1) "service!" on Solaris 8.0 or (2) "administ" on Windows NT, which allows remote attackers…
CVE-2002-1835, published 2002-12-31. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to…
CVE-2002-1834, published 2002-12-31. Medium severity, CVSS 6.4. EPSS: 1.4% chance of exploitation in the next 30 days. The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server and (1) submit print jobs directly into the "print now" queue or (2) read the…
CVE-2002-1836, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The default configuration of Xerox DocuTech 6110 and DocuTech 6115 exports certain NFS shares to the world with world writable permissions, which may allow remote attackers to modify sensitive files.