Xerox WorkCentre 7655/7665 Multifunction Systems

Known vulnerabilities detected

Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.

CSV information

Status archived
Valid from 18.06.2007
Valid until 07.09.2012
Scheme 🇺🇸 US
Manufacturer Xerox Corporation
Category Multi-Function Devices
Security level ALC_FLR.3, EAL2+

Heuristics summary

Certificate ID: CCEVS-VR-0042-2007

Certificate

certificate could not be downloaded, no link is available.

Certification report

Certification report PDF TXT

Extracted keywords

Symmetric Algorithms
RC4, DES, TDES, 3DES
Hash functions
SHA-1, MD5
Protocols
SSH, SSL
Libraries
OpenSSL

Vendor
Microsoft

Security level
EAL 2, EAL 4, EAL 2 augmented
Claims
T.RECOVER, T.COMM_SEC, T.FAXLINE
Security Assurance Requirements (SAR)
ALC_FLR.3, ATE_IND
Security Functional Requirements (SFR)
FAU_STG.4, FCS_CKM.1, FCS_CKM.2, FCS_COP.1, FCS_CKM.4, FPT_RVM.1, FPT_SEP.1
Certificates
CCEVS-VR-07-0042, 53080 CCS

Standards
FIPS 140-2, FIPS 140, RFC1321, RFC 3414, X.509, CCMB-2005-08-001, CCMB-2005-08-002, CCMB-2005-08-003

File metadata

Title Validators Report
Author Mario Tinto
Creation date D:20070621100105-04'00'
Modification date D:20070621100252-04'00'
Pages 31
Creator Acrobat PDFMaker 7.0 for Word
Producer Acrobat Distiller 7.0 (Windows)

Frontpage

Certificate ID CCEVS-VR-07-0042
Certified item Xerox WorkCentre 7655/7665 Multifunction Systems
Certification lab US NIAP

Security target

Security target PDF TXT

Extracted keywords

Symmetric Algorithms
RC4, DES, TDES, 3DES, HMAC
Asymmetric Algorithms
DH
Hash functions
SHA-1, SHA1, MD5
Schemes
Key Exchange
Protocols
SSH, SSL, IKE
Libraries
OpenSSL

Vendor
Microsoft

Security level
EAL2, EAL 2
Claims
O.AUDITS, O.RESIDUAL, O.MANAGE, O.RESTRICT, O.ONDEMAND, O.CONTROL_ACCESS, O.PROTECTCOM, T.RECOVER, T.COMM_SEC, T.FAXLINE, A.INSTALL, A.PHYSICAL_PROTECT, A.MANAGE, A.NO_EVIL_ADM, A.PROCEDURE, A.CHANGE_SA_PIN, A.SANE_NETWORK, A.SAME_CONTROL, A.EXT_RFC_COMPLIANT, A.EXT_RFC_CO, A.PHYSICAL_, OE.MANAGE, OE.PHYSICAL, OE.PROTECT_COM
Security Assurance Requirements (SAR)
ACM_CAP.2, ADO_DEL.1, ADO_IGS.1, ADV_FSP.1, ADV_RCR.1, ADV_HLD.1, AGD_ADM.1, AGD_USR.1, ALC_FLR.3, ATE_COV.1, ATE_FUN.1, ATE_IND.2, ATE_HLD.1, AVA_SOF.1, AVA_VLA.1, AVA_VLA.2
Security Functional Requirements (SFR)
FAU_GEN.1, FAU_SAR.1, FAU_SAR.2, FAU_STG.1, FAU_STG.4, FAU_STG.3, FCS_CKM.1, FCS_CKM.2, FCS_CKM.4, FCS_COP.1, FCS_CKM.1.1, FCS_CKM.2.1, FCS_COP.1.1, FCS_CKM.4.1, FDP_ACC.1, FDP_ACF.1, FDP_IFC.1, FDP_IFF.1, FDP_RIP.1, FDP_UCT.1, FDP_UIT.1, FDP_ITC.1, FDP_ITC.2, FDP_ACC.1.1, FDP_ACF.1.1, FDP_ACF.1.2, FDP_ACF.1.3, FDP_ACF.1.4, FDP_IFC.1.1, FDP_IFF.1.1, FDP_IFF.1.2, FDP_IFF.1.3, FDP_IFF.1.4, FDP_IFF.1.5, FDP_IFF.1.6, FDP_RIP.1.1, FDP_UCT.1.1, FDP_UIT.1.1, FDP_UIT.1.2, FIA_UID.2, FIA_UAU.2, FIA_UAU.7, FIA_UID.1, FIA_UID.2.1, FIA_UAU.1, FIA_UAU.2.1, FIA_UAU.7.1, FIA_UAU, FMT_MTD.1, FMT_MOF.1, FMT_SMF.1, FMT_SMR.1, FMT_MSA.2, FMT_MSA.3, FMT_MOF.1.1, FMT_MTD.1.1, FMT_SMF.1.1, FMT_SMR.1.1, FMT_SMR.1.2, FPT_RVM.1, FPT_SEP.1, FPT_STM.1, FPT_RVM.1.1, FPT_SEP.1.1, FPT_SEP.1.2, FPT_STM.1.1, FTP_ITC.1, FTP_TRP.1, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3, FTP_TRP.1.1, FTP_TRP.1.2, FTP_TRP.1.3
Certificates
53080 CCS

Standards
RFC1321, RFC 3414, RFC2409, RFC2406, RFC2104, X.509, CCMB-2005-08-001, CCMB-2005-08-002, CCMB-2005-08-003

File metadata

Title Microsoft Word - XRP2_ST_r_1 12.doc
Author pspicer2
Creation date D:20070430191519
Modification date D:20070430191519
Pages 79
Creator PScript5.dll Version 5.2
Producer GPL Ghostscript 8.15

Heuristics

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.

Certificate ID

CCEVS-VR-0042-2007

Extracted SARs

ADV_FSP.1, ADV_HLD.1, ADV_RCR.1, AGD_ADM.1, AGD_USR.1, ALC_FLR.3, ATE_COV.1, ATE_FUN.1, ATE_HLD.1, ATE_IND.2, AVA_SOF.1, AVA_VLA.2

CPE matches

Related CVEs

ID Links Severity CVSS Score Published on
Base Exploitability Impact
CVE-2008-2824
C N
HIGH 10.0 10.0 23.06.2008
CVE-2009-1656
C N
HIGH 10.0 10.0 16.05.2009

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.cc.CCCertificate",
  "category": "Multi-Function Devices",
  "cert_link": null,
  "dgst": "da088ae63f0e7134",
  "heuristics": {
    "_type": "sec_certs.sample.cc.CCCertificate.Heuristics",
    "annotated_references": null,
    "cert_id": "CCEVS-VR-0042-2007",
    "cert_lab": [
      "US"
    ],
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:h:xerox:workcentre:7665:*:*:*:*:*:*:*",
        "cpe:2.3:h:xerox:workcentre:7655:*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "eal": "EAL2+",
    "extracted_sars": {
      "_type": "Set",
      "elements": [
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_USR",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_FLR",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_HLD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_FSP",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_IND",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_SOF",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_HLD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_COV",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_FUN",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_VLA",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_RCR",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_ADM",
          "level": 1
        }
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "7665",
        "7655"
      ]
    },
    "indirect_transitive_cves": null,
    "next_certificates": null,
    "prev_certificates": null,
    "protection_profiles": null,
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2009-1656",
        "CVE-2008-2824"
      ]
    },
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "scheme_data": null,
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "maintenance_updates": {
    "_type": "Set",
    "elements": []
  },
  "manufacturer": "Xerox Corporation",
  "manufacturer_web": "https://www.xerox.com",
  "name": "Xerox WorkCentre 7655/7665 Multifunction Systems",
  "not_valid_after": "2012-09-07",
  "not_valid_before": "2007-06-18",
  "pdf_data": {
    "_type": "sec_certs.sample.cc.CCCertificate.PdfData",
    "cert_filename": null,
    "cert_frontpage": null,
    "cert_keywords": null,
    "cert_metadata": null,
    "report_filename": "st_vid10168-vr.pdf",
    "report_frontpage": {
      "US": {
        "cert_id": "CCEVS-VR-07-0042",
        "cert_item": "Xerox WorkCentre 7655/7665 Multifunction Systems",
        "cert_lab": "US NIAP"
      }
    },
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "CA": {
          "53080 CCS": 1
        },
        "US": {
          "CCEVS-VR-07-0042": 1
        }
      },
      "cc_claims": {
        "T": {
          "T.COMM_SEC": 1,
          "T.FAXLINE": 1,
          "T.RECOVER": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ALC": {
          "ALC_FLR.3": 2
        },
        "ATE": {
          "ATE_IND": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 2": 4,
          "EAL 2 augmented": 1,
          "EAL 4": 1
        }
      },
      "cc_sfr": {
        "FAU": {
          "FAU_STG.4": 1
        },
        "FCS": {
          "FCS_CKM.1": 4,
          "FCS_CKM.2": 2,
          "FCS_CKM.4": 1,
          "FCS_COP.1": 2
        },
        "FPT": {
          "FPT_RVM.1": 1,
          "FPT_SEP.1": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 5
        }
      },
      "crypto_protocol": {
        "SSH": {
          "SSH": 1
        },
        "TLS": {
          "SSL": {
            "SSL": 30
          }
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 4
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCMB-2005-08-001": 1,
          "CCMB-2005-08-002": 1,
          "CCMB-2005-08-003": 1
        },
        "FIPS": {
          "FIPS 140": 1,
          "FIPS 140-2": 2
        },
        "RFC": {
          "RFC 3414": 1,
          "RFC1321": 2
        },
        "X509": {
          "X.509": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "RC": {
            "RC4": 2
          }
        },
        "DES": {
          "3DES": {
            "3DES": 2,
            "TDES": 2
          },
          "DES": {
            "DES": 2
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 1
        }
      },
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Mario Tinto",
      "/Company": "Aerospace Corporation",
      "/CreationDate": "D:20070621100105-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 7.0 for Word",
      "/ModDate": "D:20070621100252-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 7.0 (Windows)",
      "/SourceModified": "D:20070621135958",
      "/Title": "Validators Report",
      "pdf_file_size_bytes": 232254,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.xerox.com/security"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 31
    },
    "st_filename": "st_vid10168-st.pdf",
    "st_frontpage": null,
    "st_keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "DH": 1
          }
        }
      },
      "cc_cert_id": {
        "CA": {
          "53080 CCS": 1
        }
      },
      "cc_claims": {
        "A": {
          "A.CHANGE_SA_PIN": 3,
          "A.EXT_RFC_CO": 1,
          "A.EXT_RFC_COMPLIANT": 2,
          "A.INSTALL": 3,
          "A.MANAGE": 2,
          "A.NO_EVIL_ADM": 3,
          "A.PHYSICAL_": 2,
          "A.PHYSICAL_PROTECT": 1,
          "A.PROCEDURE": 2,
          "A.SAME_CONTROL": 3,
          "A.SANE_NETWORK": 2
        },
        "O": {
          "O.AUDITS": 10,
          "O.CONTROL_ACCESS": 15,
          "O.MANAGE": 20,
          "O.ONDEMAND": 9,
          "O.PROTECTCOM": 22,
          "O.RESIDUAL": 7,
          "O.RESTRICT": 4
        },
        "OE": {
          "OE.MANAGE": 4,
          "OE.PHYSICAL": 3,
          "OE.PROTECT_COM": 3
        },
        "T": {
          "T.COMM_SEC": 5,
          "T.FAXLINE": 3,
          "T.RECOVER": 8
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ACM": {
          "ACM_CAP.2": 4
        },
        "ADO": {
          "ADO_DEL.1": 4,
          "ADO_IGS.1": 4
        },
        "ADV": {
          "ADV_FSP.1": 18,
          "ADV_HLD.1": 6,
          "ADV_RCR.1": 7
        },
        "AGD": {
          "AGD_ADM.1": 10,
          "AGD_USR.1": 8
        },
        "ALC": {
          "ALC_FLR.3": 8
        },
        "ATE": {
          "ATE_COV.1": 4,
          "ATE_FUN.1": 7,
          "ATE_HLD.1": 1,
          "ATE_IND.2": 4
        },
        "AVA": {
          "AVA_SOF.1": 4,
          "AVA_VLA.1": 3,
          "AVA_VLA.2": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 2": 1,
          "EAL2": 11
        }
      },
      "cc_sfr": {
        "FAU": {
          "FAU_GEN.1": 13,
          "FAU_SAR.1": 11,
          "FAU_SAR.2": 7,
          "FAU_STG.1": 11,
          "FAU_STG.3": 1,
          "FAU_STG.4": 7
        },
        "FCS": {
          "FCS_CKM.1": 33,
          "FCS_CKM.1.1": 4,
          "FCS_CKM.2": 17,
          "FCS_CKM.2.1": 2,
          "FCS_CKM.4": 25,
          "FCS_CKM.4.1": 1,
          "FCS_COP.1": 27,
          "FCS_COP.1.1": 6
        },
        "FDP": {
          "FDP_ACC.1": 17,
          "FDP_ACC.1.1": 1,
          "FDP_ACF.1": 8,
          "FDP_ACF.1.1": 1,
          "FDP_ACF.1.2": 1,
          "FDP_ACF.1.3": 1,
          "FDP_ACF.1.4": 1,
          "FDP_IFC.1": 36,
          "FDP_IFC.1.1": 4,
          "FDP_IFF.1": 28,
          "FDP_IFF.1.1": 4,
          "FDP_IFF.1.2": 4,
          "FDP_IFF.1.3": 4,
          "FDP_IFF.1.4": 4,
          "FDP_IFF.1.5": 4,
          "FDP_IFF.1.6": 4,
          "FDP_ITC.1": 15,
          "FDP_ITC.2": 7,
          "FDP_RIP.1": 20,
          "FDP_RIP.1.1": 2,
          "FDP_UCT.1": 17,
          "FDP_UCT.1.1": 3,
          "FDP_UIT.1": 17,
          "FDP_UIT.1.1": 3,
          "FDP_UIT.1.2": 3
        },
        "FIA": {
          "FIA_UAU": 1,
          "FIA_UAU.1": 4,
          "FIA_UAU.2": 8,
          "FIA_UAU.2.1": 1,
          "FIA_UAU.7": 9,
          "FIA_UAU.7.1": 1,
          "FIA_UID.1": 4,
          "FIA_UID.2": 9,
          "FIA_UID.2.1": 1
        },
        "FMT": {
          "FMT_MOF.1": 12,
          "FMT_MOF.1.1": 2,
          "FMT_MSA.2": 15,
          "FMT_MSA.3": 8,
          "FMT_MTD.1": 17,
          "FMT_MTD.1.1": 3,
          "FMT_SMF.1": 17,
          "FMT_SMF.1.1": 2,
          "FMT_SMR.1": 15,
          "FMT_SMR.1.1": 1,
          "FMT_SMR.1.2": 1
        },
        "FPT": {
          "FPT_RVM.1": 8,
          "FPT_RVM.1.1": 1,
          "FPT_SEP.1": 9,
          "FPT_SEP.1.1": 1,
          "FPT_SEP.1.2": 1,
          "FPT_STM.1": 9,
          "FPT_STM.1.1": 1
        },
        "FTP": {
          "FTP_ITC.1": 13,
          "FTP_ITC.1.1": 1,
          "FTP_ITC.1.2": 1,
          "FTP_ITC.1.3": 1,
          "FTP_TRP.1": 22,
          "FTP_TRP.1.1": 3,
          "FTP_TRP.1.2": 4,
          "FTP_TRP.1.3": 3
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 8
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 3
        },
        "SSH": {
          "SSH": 1
        },
        "TLS": {
          "SSL": {
            "SSL": 61
          }
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 1
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 5
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 6,
            "SHA1": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCMB-2005-08-001": 1,
          "CCMB-2005-08-002": 1,
          "CCMB-2005-08-003": 1
        },
        "RFC": {
          "RFC 3414": 2,
          "RFC1321": 3,
          "RFC2104": 1,
          "RFC2406": 1,
          "RFC2409": 1
        },
        "X509": {
          "X.509": 6
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "RC": {
            "RC4": 4
          }
        },
        "DES": {
          "3DES": {
            "3DES": 2,
            "TDES": 3
          },
          "DES": {
            "DES": 7
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 2
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 1
        }
      },
      "vulnerability": {}
    },
    "st_metadata": {
      "/Author": "pspicer2",
      "/CreationDate": "D:20070430191519",
      "/Creator": "PScript5.dll Version 5.2",
      "/ModDate": "D:20070430191519",
      "/Producer": "GPL Ghostscript 8.15",
      "/Title": "Microsoft Word - XRP2_ST_r_1 12.doc",
      "pdf_file_size_bytes": 597376,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 79
    }
  },
  "protection_profile_links": {
    "_type": "Set",
    "elements": []
  },
  "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid10168-vr.pdf",
  "scheme": "US",
  "security_level": {
    "_type": "Set",
    "elements": [
      "ALC_FLR.3",
      "EAL2+"
    ]
  },
  "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid10168-st.pdf",
  "state": {
    "_type": "sec_certs.sample.cc.CCCertificate.InternalState",
    "cert": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_garbage": false,
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "pdf_hash": null,
      "txt_hash": null
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "8ec8170f1ced82fb7adbb17fca7cb18807b29a14f5e11b2910a00d83998c3da9",
      "txt_hash": "c1a0f3239283b7076c305a3b2a773fe3a81fbe53a716a4aafccc9b2ca739f91f"
    },
    "st": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "a7b556c96a0b0323291d5fcbc0ba308873ab783fc974955d6976d2ca80d69035",
      "txt_hash": "d5ba19ef793bd49c2a3c68d755cfd68cf255a00039a7831560b275960aa40782"
    }
  },
  "status": "archived"
}