CVE-2013-6362
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
- Record
CVE-2013-6362- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-798
- Updated
- 2026-11-02
CVE List No score
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
- Record
CVE-2013-6362- Updated
- 2026-11-02
EUVDEUVD-2013-6187 No score
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
- Record
EUVD-2013-6187- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fx74-5px9-49w4 No score
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
- Record
GHSA-fx74-5px9-49w4- Updated
- 2026-11-02
Affected products
- xerox colorqube 9201 firmware
- xerox colorqube 9202 firmware
- xerox colorqube 9203 firmware
- xerox workcentre 6400 firmware
- xerox workcentre 7525 firmware
- xerox workcentre 7530 firmware
- xerox workcentre 7535 firmware
- xerox workcentre 7545 firmware
- xerox workcentre 7556 firmware
- xerox workcentre 7755 firmware
- xerox workcentre 7765 firmware
- xerox workcentre 7775 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6362 is a critical vulnerability (CVSS 9.8) in Xerox Colorqube 9201 Firmware, published February 13, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. No source names a fixed version.