Login Request a demo
High severity · published Oct 17, 2024
CVE-2024-6333
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products
7.2
CVSS
1.2%
EPSS
No
On KEV
Description
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AB
AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807 · Xerox
103.xxx.024.18600 · source: vendor
AC
AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023) · Xerox
111.xxx.003.11600 · source: vendor
AC
AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024) · Xerox
119.xxx.023.13006 · source: vendor
VB
VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024) · Xerox
119.xxx.003.11705 · source: vendor
W3
WorkCentre 3655/3655i · Xerox
075.060.004.07810 · source: vendor
W5
WorkCentre 5945/55i · Xerox
075.091.004.07810 · source: vendor
W6
WorkCentre 6655/6655i · Xerox
075.110.004.07810 · source: vendor
W7
WorkCentre 7220/7225i · Xerox
075.030.004.07810 · source: vendor
W7
WorkCentre 7830/7835i · Xerox
075.010 004.07810 · source: vendor
W7
WorkCentre 7845/7855 (IBG) · Xerox
075.080.004.07810 · source: vendor
W7
WorkCentre 7845/7855i · Xerox
075.040.004.07810 · source: vendor
W7
WorkCentre 7970/7970i · Xerox
075.200.004.07810 · source: vendor
Affected product
AB
AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807
Xerox
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-6333
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-6333
securitydocs.business.xerox.com
https://securitydocs.business.xerox.com/wp-content/uploads/2024/10/Xerox-Security-Bulletin-XRX24-015-for-Altalink-Versalink-and-WorkCentre-%E2%80%93-CVE-2024-6333-.pdf
seclists.org
http://seclists.org/fulldisclosure/2024/Oct/17