CVE-2006-5290
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and...
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."
Exploit likelihood
What each source reports
NVD Score used
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."
- Record
CVE-2006-5290- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."
- Record
CVE-2006-5290- Updated
- 2026-11-02
EUVDEUVD-2006-5275 No score
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."
- Record
EUVD-2006-5275- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-39f9-j789-q9h5 No score
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and...
The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265 and 275 allow remote attackers to bypass authentication and execute arbitrary code via "WebUI command injection on TCP/IP hostname."
- Record
GHSA-39f9-j789-q9h5- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5290 is a high vulnerability (CVSS 7.5) in Xerox Workcentre 232, published October 13, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.39%, the 88th percentile. No source names a fixed version.
References
secunia.com/advisories/22252
securityfocus.com/bid/20334/info
exchange.xforce.ibmcloud.com/vulnerabilities/29357
securitytracker.com/id?1016981
vupen.com/english/advisories/2006/3921
xerox.com/downloads/usa/en/c/cert_XRX06_005.pdf
nvd.nist.gov/vuln/detail/CVE-2006-5290
github.com/advisories/GHSA-39f9-j789-q9h5