lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 27 Apr 2016 15:08:32 +0200
From: Raphael Ernst <>
Subject: [FD] Xerox Phaser 6700 - Remote Root-Exploits utilizing Clone Files

Document Title:
Xerox Phaser 6700 - Remote Root-Exploits utilizing Clone Files

References (Source):

Release Date:

Product & Service Introduction:
The Xerox Phaser 6700 is an office printer.

Vulnerability Disclosure Timeline:
2016-03-24: Notification and information exchange with Xerox.
2016-03-29: Verified issue for firmware as requested
by Xerox and notified Xerox.
2016-04-27: Public Disclosure.

Discovery Status:

Affected Product(s):
Xerox Phaser 6700:

Exploitation Technique:
- Remote: Xerox provides a clone feature to transfer printer settings.
It is possible to run arbitrary code in these clone files.
- Remote: The clone file upload page does not check the login credentials.
- Local: The firmware is located on an easily accessible SD-card. It is
possible to change the Linux based firmware.

Solution - Fix & Patch:
- Disable update and clone features.
- Restrict admin access.

Credits & Authors:
Fraunhofer FKIE: Raphael Ernst, Peter Weidenbach

Sent through the Full Disclosure mailing list
Web Archives & RSS:

Powered by blists - more mailing lists