CVE-2006-1139: Unspecified vulnerability in the ESS/ Network Controller in Xerox CopyCentre and Xerox WorkCentre Pro, runn...

Security readout for executives and security teams

This issue affects older Xerox CopyCentre and WorkCentre Pro devices. After a power loss, the Immediate Image Overwrite feature may fail, potentially leaving copied, printed, or scanned data on the device exposed. The bundle does not provide CVSS, CWE, or confirmed exploitation evidence. Exposure is most likely in legacy environments still operating the named Xerox multifunction devices with affected controller software. Risk rises where devices handle regulated, confidential, legal, HR, medical, financial, or customer documents and where power events are plausible. Treat as a targeted legacy-device data exposure issue. Prioritize if these devices remain in production or process sensitive documents. If the fleet has been retired or upgraded beyond the affected versions, urgency is lower but should still be documented. Mitigation focus: Inventory Xerox CopyCentre and WorkCentre Pro devices still in service.; Check ESS/Network Controller software versions against the affected version ranges.; Consult Xerox advisory XRX06-002 for vendor-approved remediation..

Prepared

Jun 29, 2026, 13:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.