Insecure Configuration in Xerox DocuTech Multifunction Printers

CVE-2002-1835

Summary

Certain Xerox DocuTech models, specifically the 6110 and 6115 running Solaris 8.0, come with numerous unnecessary services enabled by default. This misconfiguration, which includes services like RPC and sprayd, could expose these devices to unauthorized remote access. Attackers with network access may exploit these enabled services to gain control over the printer, leading to potential data breaches or manipulations. Ensuring these devices are properly configured is critical to secure enterprise environments.

References