System software versions available to address denial of service and other vulnerabilities in the ESS.
WorkCentre Pro 75
Security Bulletins for Xerox Products (10)
Xerox Security Bulletin XRX06-007 (PDF 228.1K)
A command injection vulnerability exists in the ESS/ Network Controller and MicroServer Web Server. If exploited this vulnerability could allow remote execution of arbitrary software.
This bulletin has been rescinded and is no longer valid. Software Download permanently unavailable
Xerox Security Bulletin XRX05-007 (PDF 102.7K)
Vulnerabilities in the WorkCentre M35/M45/M55, WorkCentre M165/175 and the WorkCentre Pro 32/40 Color, WorkCentre 35/45/55/65/75/90 and WorkCentre Pro 165/175 Xerox MicroServer Web Server could potentially permit unauthorized access.
cert_P23_HTTP_Patch_AllWCP.zip
Xerox Security Bulletin XRX04-008 (PDF 32.9K)
The information provided here is consistent with the security functional claims made regarding CopyCentre 65/75/90 and WorkCentre Pro 65/75/90 in the Security Target for Common Criteria Certification.
Xerox Security Bulletin XRX05-005 (PDF 37.3K)
Vulnerability in the WorkCentre M35/M45/M55, WorkCentre M165/M175, WorkCentre Pro 32/40 Color, WorkCentre Pro 35/45/55/65/75/90 and WorkCentre Pro C2128/C2636/C3545 Xerox MicroServer Web Server could potentially permit unauthorized access.
Note: The patch applies to launch level software only.
cert_P21_WCP_WebUI_Patch.zip
Xerox Security Bulletin XRX04-010 (PDF 41K)
Vulnerability in the WorkCentre M35/M45/M45 and WorkCentre Pro 35/45/55/65/75/90 ESS/ Network Controller could potentially permit unauthorized access.
cert_XRX04_010_patch.zip
Xerox Security Bulletin XRX04-004 (PDF 99K)
Vulnerability in the WorkCentre M35/M45/M55, WorkCentre Pro Color 32/40, and WorkCentre Pro 35/45/55/65/75/90 ESS/ Network Controller could cause a denial of service.
cert_XRX04-04_patch.zip
Xerox Security Bulletin XRX04-003 (PDF 148.9K)
WorkCentre Multifunction Devices (MFD) WorkCentre M35/M45/M55, WorkCentre Pro Color 32/40 and WorkCentre Pro 35/45/55/65/75/90 PostScript directory traversal patch.
cert_PS_Patch_WCP.zip
Xerox Security Bulletin XRX04-009 (PDF 35.4K)
Vulnerability in the http server on the WorkCentre M35/M45/M55, WorkCentre Pro Color 32/40 and WorkCentrePro 35/45/55/65/75/90 ESS/ Network Controller could potentially permit unauthorized access.
cert_P17_WCP_HTTP_Access_Patch.zip
Xerox Security Bulletin XRX04-002 (PDF 118.3K)
The Document Centre 220/230, Document Centre 240/255/265, Document Centre 332/340, Document Centre 420/425/432/440, Document Centre 460/470/480/490, Document Centre 535/545/555, WorkCentre M35/M45/M55, WorkCentre Pro Color 32/40, contain a Xerox MicroServer Web Server Vulnerability.
cert_HTTP_Patches.zip