Read the docs
TI-2013-05322 Aliases CVE-2013-6362GHSA-fx74-5px9-49w4

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.

Priority MEDIUM 44CWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.

Summary

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.

Why it matters now

EPSS 0.01175 67th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:o:xerox:colorqube_9201_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:colorqube_9201:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:colorqube_9202_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:colorqube_9202:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:colorqube_9203_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:colorqube_9203:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:workcentre_6400_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:workcentre_6400:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:workcentre_7525_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:workcentre_7525:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
  • cpe:2.3:o:xerox:colorqube_9201_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:colorqube_9201:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:colorqube_9202_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:colorqube_9202:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:colorqube_9203_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:colorqube_9203:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:workcentre_6400_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:workcentre_7525_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_7525:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:xerox:workcentre_7530_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:workcentre_7530:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:workcentre_7535_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:workcentre_7535:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:workcentre_7545_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:workcentre_7545:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:workcentre_7556_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:workcentre_7556:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:workcentre_7755_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:workcentre_7755:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:workcentre_7765_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:workcentre_7765:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:workcentre_7775_firmware:2013:*:*:*:*:*:*:*2013VulnerableXerox
cpe:2.3:h:xerox:workcentre_7775:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
  • cpe:2.3:o:xerox:workcentre_7530_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_7530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:workcentre_7535_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_7535:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:workcentre_7545_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_7545:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:workcentre_7556_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_7556:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:workcentre_7755_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_7755:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:workcentre_7765_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_7765:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:workcentre_7775_firmware:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_7775:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-6362
  2. 2026-10-03 Alias added: GHSA-fx74-5px9-49w4

References

Exploit 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences