CVE-2005-1936: Unknown vulnerability in the web server for the ESS/ Network Controller for Xerox Document Centre 240 throu...

Security readout for executives and security teams

This CVE concerns older Xerox Document Centre multifunction devices. The built-in web server in the ESS/Network Controller may allow unauthorized access. The public bundle does not explain the flaw, give a severity score, or confirm exploitation, so urgency depends on whether these legacy devices are still present and reachable. Exposure is most likely in environments still operating Xerox Document Centre 240-555 devices with System Software 27.18.017 or earlier, especially where the device web interface is reachable beyond a tightly controlled administration network. Treat this as a legacy asset exposure question. It is not KEV-listed in the bundle, but affected devices can expose administrative access risk if still deployed and reachable. Mitigation focus: Inventory Xerox Document Centre 240-555 devices and record System Software versions.; Consult Xerox CERT XRX05-003 and current Xerox guidance for corrective actions.; Restrict device web server access to trusted administration networks..

Prepared

Jun 29, 2026, 20:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.