CVE-2009-1656

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-05-16 · updated 2026-06-16

Description

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."

Affected products

Xerox Workcentre: 232, 238, 245, 255, 265, 275 (+11)

References

http://osvdb.org/54457
http://secunia.com/advisories/35101
http://www.securityfocus.com/bid/34984
http://www.securitytracker.com/id?1022238
http://www.vupen.com/english/advisories/2009/1328
http://www.xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50558
http://osvdb.org/54457
http://secunia.com/advisories/35101
http://www.securityfocus.com/bid/34984
http://www.securitytracker.com/id?1022238
http://www.vupen.com/english/advisories/2009/1328

Get alerted when CVE-2009-1656 or the next vulnerability affects your stack