WorkCentre M45™ Sicherheitsinformationen

Xerox Security Bulletin XRX12-003 v1.1 (PDF 185.5K)
March 07, 2012
NOTE: We are re-issuing this bulletin due to a spelling error of the name of one of the researchers. No technical content in the bulletin has changed.

Vulnerabilities exist that, if exploited, could allow remote attackers to insert arbitrary code into the device. This could occur with a specifically crafted Postscript or firmware job submitted to the device. If successful, an attacker could make unauthorized changes to the system configuration; however, customer and user passwords are not exposed.

As part of Xerox’s on-going efforts to protect customers, the ability to accept these specially crafted jobs can be disabled for the affected products listed in the bulletin. Links for the software needed are contained inside the bulletin.

Hard Drive Retention Offering for Xerox Products in the United States (PDF 781.5K)
February 08, 2012

Common Criteria Certification of the WorkCentre M35/M45/M55
January 18, 2011
NIAP Validated Product Listing
Validation Report (PDF, 247KB)

Xerox Security Bulletin XRX06-007 (PDF 228.1K)
October 15, 2006
A command injection vulnerability exists in the ESS/ Network Controller and MicroServer Web Server. If exploited this vulnerability could allow remote execution of arbitrary software.

This bulletin has been rescinded and is no longer valid. Software Download permanently unavailable

Xerox Security Bulletin XRX05-007 (PDF 102.7K)
August 25, 2005
Vulnerabilities in the WorkCentre M35/M45/M55, WorkCentre M165/175 and the WorkCentre Pro 32/40 Color, WorkCentre 35/45/55/65/75/90 and WorkCentre Pro 165/175 Xerox MicroServer Web Server could potentially permit unauthorized access.
> Download Software Update
(zip archive 1.6M)

Xerox Security Bulletin XRX04-010 (PDF 41K)
December 20, 2004
Vulnerability in the WorkCentre M35/M45/M45 and WorkCentre Pro 35/45/55/65/75/90 ESS/ Network Controller could potentially permit unauthorized access.
> Download Software Update
(zip archive 24.5M)

Secure Installation and Operation of Your WorkCentre M35/M45/M55 or WorkCentre Pro 35/45/55 (PDF 59.2K)
December 20, 2004

Xerox Security Bulletin XRX04-006 (PDF 105.8K)
August 31, 2004
Vulnerability in the WorkCentre M35/M45/M55, WorkCentre Pro Color 32/40, and WorkCentre Pro 35/45/55 ESS/ Network Controller could cause Immediate Image Overwrite to fail in a specific instance with no indication after an unexpected power loss.
> Download Software Update
(zip archive 613.4K)

Xerox Security Bulletin XRX04-007 (PDF 103.3K)
August 31, 2004
Vulnerability in the WorkCentre M35/M45/M55, WorkCentre Pro Color 322/40 and WorkCentre Pro 35/45/55 Xerox MicroServer Web Server could cause a denial of service.
> Download Software Update
(zip archive 2.1M)

Xerox Security Bulletin XRX04-004 (PDF 99K)
June 24, 2004
Vulnerability in the WorkCentre M35/M45/M55, WorkCentre Pro Color 32/40, and WorkCentre Pro 35/45/55/65/75/90 ESS/ Network Controller could cause a denial of service.
> Download Software Update
(zip archive 27.2M)

Xerox Security Bulletin XRX04-003 (PDF 148.9K)
April 14, 2004
WorkCentre Multifunction Devices (MFD) WorkCentre M35/M45/M55, WorkCentre Pro Color 32/40 and WorkCentre Pro 35/45/55/65/75/90 PostScript directory traversal patch.
> Download Software Update
(zip archive 5.4M)

Xerox Security Bulletin XRX04-009 (PDF 35.4K)
April 13, 2004
Vulnerability in the http server on the WorkCentre M35/M45/M55, WorkCentre Pro Color 32/40 and WorkCentrePro 35/45/55/65/75/90 ESS/ Network Controller could potentially permit unauthorized access.
> Download Software Update
(zip archive 13.6K)

Xerox Security Bulletin XRX04-002 (PDF 118.3K)
March 10, 2004
The Document Centre 220/230, Document Centre 240/255/265, Document Centre 332/340, Document Centre 420/425/432/440, Document Centre 460/470/480/490, Document Centre 535/545/555, WorkCentre M35/M45/M55, WorkCentre Pro Color 32/40, contain a Xerox MicroServer Web Server Vulnerability.
> Download Software Update
(zip archive 28.9M)