{"id":"CVE-2016-11061","aliases":["EUVD-2016-2050","GHSA-ggvj-5g32-658q"],"status":"published","title":"Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi,...","description":"Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01986,"percentile":0.80715,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2020-04-29T21:23:30Z","modified":"2026-06-17T00:40:55Z","products":[{"vendor":"xerox","product":"workcentre_3655_firmware"},{"vendor":"xerox","product":"workcentre_3655i_firmware"},{"vendor":"xerox","product":"workcentre_5865_firmware"},{"vendor":"xerox","product":"workcentre_5865i_firmware"},{"vendor":"xerox","product":"workcentre_5875_firmware"},{"vendor":"xerox","product":"workcentre_5875i_firmware"},{"vendor":"xerox","product":"workcentre_5890_firmware"},{"vendor":"xerox","product":"workcentre_5890i_firmware"},{"vendor":"xerox","product":"workcentre_5945_firmware"},{"vendor":"xerox","product":"workcentre_5945i_firmware"},{"vendor":"xerox","product":"workcentre_5955_firmware"},{"vendor":"xerox","product":"workcentre_5955i_firmware"},{"vendor":"xerox","product":"workcentre_6655_firmware"},{"vendor":"xerox","product":"workcentre_6655i_firmware"},{"vendor":"xerox","product":"workcentre_7200_firmware"},{"vendor":"xerox","product":"workcentre_7200i_firmware"},{"vendor":"xerox","product":"workcentre_7220_firmware"},{"vendor":"xerox","product":"workcentre_7225_firmware"},{"vendor":"xerox","product":"workcentre_7225i_firmware"},{"vendor":"xerox","product":"workcentre_7830_firmware"},{"vendor":"xerox","product":"workcentre_7835_firmware"},{"vendor":"xerox","product":"workcentre_7845_firmware"},{"vendor":"xerox","product":"workcentre_7855_firmware"},{"vendor":"xerox","product":"workcentre_7970_firmware"},{"vendor":"xerox","product":"workcentre_7970i_firmware"}],"references":[{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2016/10/cert_Mini_Security_Bulletin_XRX16Q_for_ConnectKey_R16-05_v1-1-2.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-11061"},{"url":"https://github.com/advisories/GHSA-ggvj-5g32-658q"}],"sources":{"cve":[{"id":"CVE-2016-11061","description":"Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.","status":"published","published":"2020-04-29T21:23:30Z","modified":"2024-08-06T03:47:34.938Z","updated_at":"2026-11-02T14:33:36.175943Z"}],"euvd":[{"id":"EUVD-2016-2050","description":"Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.","status":"published","published":"2020-04-29T21:23:30Z","modified":"2024-08-06T03:47:34Z","updated_at":"2026-11-03T02:22:22.200353Z"}],"ghsa":[{"id":"GHSA-ggvj-5g32-658q","title":"Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi,...","description":"Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.","status":"published","published":"2022-05-24T17:16:57Z","modified":"2023-01-29T05:02:46Z","updated_at":"2026-11-02T14:45:10.011414Z"}],"nvd":[{"id":"CVE-2016-11061","description":"Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.","status":"published","published":"2020-04-29T22:15:11.81Z","modified":"2026-06-17T00:40:55.243Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:03:40.524348Z"}]}}