CVE-2024-6333

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

CVSS 7.2 HIGHEPSS 1.2%CWE-77 CWE-78

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Xerox · AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807 Xerox · AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024)Xerox · AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023)Xerox · VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024)Xerox · WorkCentre 3655/3655i Xerox · WorkCentre 5945/55i Xerox · WorkCentre 6655/6655i Xerox · WorkCentre 7220/7225i Xerox · WorkCentre 7830/7835i Xerox · WorkCentre 7845/7855i Xerox · WorkCentre 7845/7855 (IBG)Xerox · WorkCentre 7970/7970i Xerox · WorkCentre EC7836 Xerox · WorkCentre EC7856 Xerox · Xerox® EC8036 / EC8056 Xerox · Xerox® EC8036 / EC8056 - Common Criteria (June 2022)Xerox · Xerox® EC8036 / EC8056 - Common Criteria (June 2024)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://seclists.org/fulldisclosure/2024/Oct/17 https://securitydocs.business.xerox.com/wp-content/uploads/2024/10/Xerox-Security-Bulletin-XRX24-015-for-Altalink-Versalink-and-WorkCentre-%E2%80%93-CVE-2024-6333-.pdf