Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-6333— Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

Quick assessment

Affected
Xerox AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Xerox AltaLink等都是美国施乐（Xerox）公司的产品。Xerox AltaLink是一个硬件设备。Xerox VersaLink是一系列商用打印机。Xerox WorkCentre是一系列一体式打印机。 Xerox多款产品存在安全漏洞，该漏洞源于存在经过验证的远程代码执行漏洞。以下产品受到影响：Xerox AltaLink、Xerox VersaLink和Xerox WorkCentre。

CVSS 7.2 · High EPSS 1.17% · P67

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-6333

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products
Source: CVE Program / CVE List V5
Vulnerability Description
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Xerox多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Xerox AltaLink等都是美国施乐（Xerox）公司的产品。Xerox AltaLink是一个硬件设备。Xerox VersaLink是一系列商用打印机。Xerox WorkCentre是一系列一体式打印机。 Xerox多款产品存在安全漏洞，该漏洞源于存在经过验证的远程代码执行漏洞。以下产品受到影响：Xerox AltaLink、Xerox VersaLink和Xerox WorkCentre。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Xerox AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807 103.xxx.024.18600 -
Xerox Xerox® EC8036 / EC8056 103.xxx.024.18600 -
Xerox Xerox® EC8036 / EC8056 - Common Criteria (June 2022) 103.023.031.35105 -
Xerox Xerox® EC8036 / EC8056 - Common Criteria (June 2024) 103.xxx.013.14115 -
Xerox AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024) 119.xxx.023.13006 -
Xerox AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023) 111.xxx.003.11600 -
Xerox VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024) 119.xxx.003.11705 -
Xerox WorkCentre 3655/3655i 075.060.004.07810 -
Xerox WorkCentre 5945/55i 075.091.004.07810 -
Xerox WorkCentre 6655/6655i 075.110.004.07810 -
Xerox WorkCentre 7220/7225i 075.030.004.07810 -
Xerox WorkCentre 7830/7835i 075.010 004.07810 -
Xerox WorkCentre 7845/7855i 075.040.004.07810 -
Xerox WorkCentre 7845/7855 (IBG) 075.080.004.07810 -
Xerox WorkCentre 7970/7970i 075.200.004.07810 -
Xerox WorkCentre EC7836 075.050.004.07810 -
Xerox WorkCentre EC7856 075.020.004.07810 -

II. Public POCs for CVE-2024-6333

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-6333

请登录查看更多情报信息。

Other References for CVE-2024-6333 (1)

IV. Related Vulnerabilities

Same vendor: Xerox
Same weakness: CWE-78