CVE-2009-1656: Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 56...

Security readout for executives and security teams

This CVE concerns older Xerox multifunction printers where a remote attacker may be able to run arbitrary commands. The public record names several WorkCentre and WorkCentre Pro models, but does not provide attack details, CVSS scoring, or confirmed exploitation evidence. Exposure is most likely in organizations still operating the named legacy Xerox WorkCentre or WorkCentre Pro models, especially if reachable from untrusted networks. Current exposure cannot be inferred without asset inventory because the CVE record lists models but no version or CPE detail. Prioritize inventory and exposure reduction for legacy Xerox devices. The business risk is uncertain but potentially high because the described impact is remote command execution, and older printers often remain overlooked on internal networks. Mitigation focus: Identify whether any named Xerox WorkCentre or WorkCentre Pro models remain in use.; Review Xerox CERT XRX09-02 for vendor-confirmed fixes, firmware, or replacement guidance.; Avoid exposing affected devices to untrusted networks while vendor guidance is being verified..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.