WorkCentre™ 7132 Informations sur la sécurité

Generic Xerox Multifunction Device Secure Installation and Operation Guide v1.0 (PDF 232.7K)
September 06, 2012

Xerox Security Bulletin XRX12-003 v1.1 (PDF 185.5K)
March 07, 2012
NOTE: We are re-issuing this bulletin due to a spelling error of the name of one of the researchers. No technical content in the bulletin has changed.

Vulnerabilities exist that, if exploited, could allow remote attackers to insert arbitrary code into the device. This could occur with a specifically crafted Postscript or firmware job submitted to the device. If successful, an attacker could make unauthorized changes to the system configuration; however, customer and user passwords are not exposed.

As part of Xerox’s on-going efforts to protect customers, the ability to accept these specially crafted jobs can be disabled for the affected products listed in the bulletin. Links for the software needed are contained inside the bulletin.

Hard Drive Retention Offering for Xerox Products in the United States (PDF 781.5K)
February 08, 2012

Restricted Information Assurance Disclosure Documents
The Information Assurance Disclosure Document created for this product requires a Non-Disclosure Agreement. Follow this link to find your sales representative.
> Blank Non-Disclosure Agreement
(34.5K)

Common Criteria Certification of the WorkCentre 7132
January 18, 2011
JISEC Validated Product Listing
Certification Report (PDF, 50KB)

Xerox Security Bulletin XRX08-004 (PDF 1M)
May 22, 2008
A persistent cross site scripting vulnerability exists in the web server of the WorkCentre 7132 and WorkCentre 7228/7235/7245. If exploited, this vulnerability could allow code injection by malicious web users into the web pages viewed by other users.

Download Software Update: Refer to the XRX08-004 Security Bulletin to determine which file to download.
> WorkCentre 7132 with Postscript Binary
(zip archive 25.8M)
> WorkCentre 7132 with Postscript Executable
(zip archive 27.7M)
> WorkCentre 7132 Standard Binary
(zip archive 20.4M)
> WorkCentre 7132 Standard Executable
(zip archive 22.3M)
> WorkCentre 7228/7235/7245 Binary
(zip archive 39.4M)
> WorkCentre 7228/7235/7245 Executable
(zip archive 41.3M)

WorkCentre 7132 Statement of Volatility (PDF 15.8K)
August 21, 2007