CVE-2006-6441

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-10 · updated 2026-06-16

Description

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive.

Affected products

Xerox Workcentre 232: all versions
Xerox Workcentre 238: all versions
Xerox Workcentre 245: all versions
Xerox Workcentre 255: all versions
Xerox Workcentre 265: all versions
Xerox Workcentre 275: all versions

References

http://secunia.com/advisories/23265
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
http://secunia.com/advisories/23265
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf

Get alerted when CVE-2006-6441 or the next vulnerability affects your stack