WorkCentre Pro C2128/C2636/C3545 Security Information
Hard Drive Retention Offering for Xerox Products in the United States (PDF 264.5K)
February 02, 2015
This offering is for US customers who purchase devices directly from Xerox, and who call 1-800-821-2797 to request service.
Xerox Security Bulletin XRX12-003 v1.1 (PDF 185.5K)
March 07, 2012
NOTE: We are re-issuing this bulletin due to a spelling error of the name of one of the researchers. No technical content in the bulletin has changed.
Vulnerabilities exist that, if exploited, could allow remote attackers to insert arbitrary code into the device. This could occur with a specifically crafted Postscript or firmware job submitted to the device. If successful, an attacker could make unauthorized changes to the system configuration; however, customer and user passwords are not exposed.
As part of Xerox’s on-going efforts to protect customers, the ability to accept these specially crafted jobs can be disabled for the affected products listed in the bulletin. Links for the software needed are contained inside the bulletin.
Restricted Information Assurance Disclosure Documents
The Information Assurance Disclosure Document created for this product requires a Non-Disclosure Agreement. Follow this link to find your sales representative.
> Blank Non-Disclosure Agreement
Common Criteria Certification of the WorkCentre Pro C2128/C2636/C3545
January 18, 2011
NIAP Validated Product Listing
Validation Report (PDF, 163KB)
WorkCentre Pro 2128-2636-3545 Color Statement of Volatility (PDF 21.1K)
August 21, 2007
Xerox Security Bulletin XRX06-007 (PDF 228.1K)
October 15, 2006
A command injection vulnerability exists in the ESS/ Network Controller and MicroServer Web Server. If exploited this vulnerability could allow remote execution of arbitrary software.
This bulletin has been rescinded and is no longer valid. Software Download permanently unavailable
Xerox Security Bulletin XRX05-006 (PDF 41.9K)
August 04, 2005
Vulnerabilities in the WorkCentre Pro C2128/2636/3545 Xerox MicroServer Web Server could potentially permit unauthorized access.
> Download Software Update
(zip archive 581K)
Secure Installation and Operation of Your CopyCentre C2128/C2636/C3545 or WorkCentre Pro C2128/C2636/C3545 (PDF 61.5K)
July 18, 2005
Xerox Security Bulletin XRX05-005 (PDF 37.3K)
April 13, 2005
Vulnerability in the WorkCentre M35/M45/M55, WorkCentre M165/M175, WorkCentre Pro 32/40 Color, WorkCentre Pro 35/45/55/65/75/90 and WorkCentre Pro C2128/C2636/C3545 Xerox MicroServer Web Server could potentially permit unauthorized access.
Note: The patch applies to launch level software only.
> Download Software Update
(zip archive 7.7M)