CVE-2009-1656

Name: CVE-2009-1656
Creator: NVD / NIST
Published: 2009-05-16T18:30:00.343+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 3.59%

Last modified Jun 16, 2026

CVE-2009-1656 is a vulnerability of currently unknown severity. Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability.". EPSS estimates a 3.59% chance of exploitation in the next 30 days.

Description

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."

Metrics

EPSS Probability

3.59%

88.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Xerox	Workcentre	232
Xerox	Workcentre	238
Xerox	Workcentre	245
Xerox	Workcentre	255
Xerox	Workcentre	265
Xerox	Workcentre	275
Xerox	Workcentre	5632
Xerox	Workcentre	5638
Xerox	Workcentre	5645
Xerox	Workcentre	5655
Xerox	Workcentre	5665
Xerox	Workcentre	5675
Xerox	Workcentre	5687
Xerox	Workcentre	7655
Xerox	Workcentre	7665
Xerox	Workcentre	7675

References

http://osvdb.org/54457
http://secunia.com/advisories/35101Vendor Advisory
http://www.securityfocus.com/bid/34984
http://www.securitytracker.com/id?1022238
http://www.vupen.com/english/advisories/2009/1328Patch, Vendor Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdfPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50558
http://osvdb.org/54457
http://secunia.com/advisories/35101Vendor Advisory
http://www.securityfocus.com/bid/34984
http://www.securitytracker.com/id?1022238
http://www.vupen.com/english/advisories/2009/1328Patch, Vendor Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdfPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50558

Timeline

Published: May 16, 2009
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2009-1656?

How severe is CVE-2009-1656?

Severity scoring for CVE-2009-1656 is pending analysis. The EPSS model estimates a 3.59% probability of exploitation in the next 30 days.

How do I fix CVE-2009-1656?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-1656?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST