RCE in Xerox Altalink® B8045 / B8055 B8065 B8075 B8090 | C8030 C8035 C8045 C8055 C807
CVE-2024-6333
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.012 (65.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Xerox Altalink® B8045 / B8055 B8065 B8075 B8090 | C8030 C8035 C8045 C8055 C807 — versions 103.xxx.024.18600
- Xerox Altalink®c8130 / C8135 C8145 C8155 C8170 | B8145 B8155 B8170 Common Criteria (Aug 2024) — versions 119.xxx.023.13006
- Xerox Altalink® C8130 / C8135 C8145 C8155 C8170 | B8145 B8155 B8170 Common Criteria Certified (Aug 2023) — versions 111.xxx.003.11600
- Xerox Versalink® B625 / C625 | B425 C425 Common Criteria Certified (2024) — versions 119.xxx.003.11705
- Xerox Workcentre 3655/3655i — versions 075.060.004.07810
- Xerox Workcentre 5945/55i — versions 075.091.004.07810
- Xerox Workcentre 6655/6655i — versions 075.110.004.07810
- Xerox Workcentre 7220/7225i — versions 075.030.004.07810
- Xerox Workcentre 7830/7835i — versions 075.010 004.07810
- Xerox Workcentre 7845/7855i — versions 075.040.004.07810
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-6333?
- CVE-2024-6333 is a high-severity vulnerability in Xerox Altalink® B8045 / B8055 B8065 B8075 B8090 | C8030 C8035 C8045 C8055 C807, classified under Command Injection. CVSS score: 7.2/10. Published 2024-10-17.
- How severe is CVE-2024-6333?
- High severity. CVSS v3 base score is 7.2 out of 10.
- Is CVE-2024-6333 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.