CVE-2005-2646: Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420...

Security readout for executives and security teams

This old Xerox device vulnerability could let a remote attacker disrupt affected multifunction devices or read files through crafted web requests. The affected component is the embedded Xerox MicroServer Web Server on specific Document Centre models. The source bundle does not provide severity scoring or attack detail, so urgency depends on whether these legacy devices still exist and are reachable. Exposure is most likely in environments still running the named legacy Xerox Document Centre devices with the embedded web server enabled. Risk rises if the HTTP interface is reachable from user networks, partner networks, or the internet. Many organizations may no longer operate these models, so asset confirmation is the first step. Prioritize if legacy Xerox Document Centre devices are still deployed or reachable across broad networks. The business impact is operational disruption and potential file exposure from office infrastructure. If no affected models remain, document that result and close the exposure record. Mitigation focus: Identify whether affected Xerox Document Centre models remain in service.; Review Xerox advisories XRX05-008 and XRX05-009 for vendor guidance.; Restrict access to the embedded web server from untrusted networks..

Prepared

Jun 29, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.