Xerox Security Mini Bulletin XRX17AN V1.0 (PDF 235.6K)

Xerox® WorkCentre® 3655*/3655i*/58XX*/58XXi* 59XX*/59XXi*/6655**/6655i**/72XX*/72XXi* 78XX**/78XXi**/7970**/7970i** Multifunction Printer Color Multifunction Printer SPAR Release 073.xxx.237.28600

Xerox Security Mini Bulletin XRX17AL V1.0 (PDF 226.9K)

Xerox® WorkCentre® 3655/3655i/58XX/58XXi 59XX/59XXi/6655/6655i/72XX/72XXi 78XX/78XXi/7970/7970i MultiFunction Printer R17-09 SPAR Release 073.xxx.197.28500

Xerox Security Bulletin XRX12-003 v1.1 (PDF 185.5K)

NOTE: We are re-issuing this bulletin due to a spelling error of the name of one of the researchers. No technical content in the bulletin has changed.

Vulnerabilities exist that, if exploited, could allow remote attackers to insert arbitrary code into the device. This could occur with a specifically crafted Postscript or firmware job submitted to the device. If successful, an attacker could make unauthorized changes to the system configuration; however, customer and user passwords are not exposed.

As part of Xerox’s on-going efforts to protect customers, the ability to accept these specially crafted jobs can be disabled for the affected products listed in the bulletin. Links for the software needed are contained inside the bulletin.

Xerox Security Bulletin XRX08-004 (PDF 1M)

A persistent cross site scripting vulnerability exists in the web server of the WorkCentre 7132 and WorkCentre 7228/7235/7245. If exploited, this vulnerability could allow code injection by malicious web users into the web pages viewed by other users.

Download Software Update: Refer to the XRX08-004 Security Bulletin to determine which file to download.


cert_P35_WC7132-PS_BIN.zip
cert_P35_WC7132-PS_EXEC.zip
cert_P35_WC7132-STD_BIN.zip
cert_P35_WC7132-STD_EXEC.zip
cert_P35_WC7228-7235-7245_BIN.zip
cert_P35_WC7228-7235-7245_EXEC.zip

Restricted Information Assurance Disclosure Documents

The Information Assurance Disclosure Document created for this product requires a Non-Disclosure Agreement.

Follow this link to find your sales representative.


Non-Disclosure-Agreement3.doc

Generic Xerox Multifunction Device Secure Installation and Operation Guide v1.0 (PDF 232.7K)

This document has been created to detail the security settings available to customers on Xerox Multifunction devices that may not have their own specific Secure Installation and Operation document.

NOTE: Not all products will support all the security features detailed in this document.