kbrain

CVE-2016-11061

CRITICAL · CVSS 9.8EPSS 2.0%EU EUVD

Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.

Key facts

CVSS score
9.8 (v3.1)
Severity
CRITICAL
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-78
EPSS score
2.0% (80th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2016-2050)
Published
April 29, 2020
NVD last modified
June 17, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2016-2050 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

  • xerox / workcentre 3655
  • xerox / workcentre 3655 firmware
  • xerox / workcentre 3655i
  • xerox / workcentre 3655i firmware
  • xerox / workcentre 5865
  • xerox / workcentre 5865 firmware
  • xerox / workcentre 5865i
  • xerox / workcentre 5865i firmware
  • xerox / workcentre 5875
  • xerox / workcentre 5875 firmware
  • xerox / workcentre 5875i
  • xerox / workcentre 5875i firmware
  • xerox / workcentre 5890
  • xerox / workcentre 5890 firmware
  • xerox / workcentre 5890i
  • xerox / workcentre 5890i firmware
  • xerox / workcentre 5945
  • xerox / workcentre 5945 firmware
  • xerox / workcentre 5945i
  • xerox / workcentre 5945i firmware
  • xerox / workcentre 5955
  • xerox / workcentre 5955 firmware
  • xerox / workcentre 5955i
  • xerox / workcentre 5955i firmware
  • xerox / workcentre 6655
  • xerox / workcentre 6655 firmware
  • xerox / workcentre 6655i
  • xerox / workcentre 6655i firmware
  • xerox / workcentre 7200
  • xerox / workcentre 7200 firmware
  • xerox / workcentre 7200i
  • xerox / workcentre 7200i firmware
  • xerox / workcentre 7220
  • xerox / workcentre 7220 firmware
  • xerox / workcentre 7225
  • xerox / workcentre 7225 firmware
  • xerox / workcentre 7225i
  • xerox / workcentre 7225i firmware
  • xerox / workcentre 7830
  • xerox / workcentre 7830 firmware
  • xerox / workcentre 7835
  • xerox / workcentre 7835 firmware
  • xerox / workcentre 7845
  • xerox / workcentre 7845 firmware
  • xerox / workcentre 7855
  • xerox / workcentre 7855 firmware
  • xerox / workcentre 7970
  • xerox / workcentre 7970 firmware
  • xerox / workcentre 7970i
  • xerox / workcentre 7970i firmware

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain