CVE-2024-63337.2HighCWE-78

CVE-2024-6333: Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

Xerox · AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055…

Affected: Xerox AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055… · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.2%probability of exploitation in the next 30 days

67th percentile

050100

Higher than 67% of scored CVEs

7.2HighCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.

Affected products17

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Xerox · AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807103.xxx.024.18600
Xerox · Xerox® EC8036 / EC8056103.xxx.024.18600
Xerox · Xerox® EC8036 / EC8056 - Common Criteria (June 2022)103.023.031.35105
Xerox · Xerox® EC8036 / EC8056 - Common Criteria (June 2024)103.xxx.013.14115
Xerox · AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024)119.xxx.023.13006
Xerox · AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023)111.xxx.003.11600
Xerox · VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024)119.xxx.003.11705
Xerox · WorkCentre 3655/3655i075.060.004.07810
Xerox · WorkCentre 5945/55i075.091.004.07810
Xerox · WorkCentre 6655/6655i075.110.004.07810
Xerox · WorkCentre 7220/7225i075.030.004.07810
Xerox · WorkCentre 7830/7835i075.010 004.07810
Xerox · WorkCentre 7845/7855i075.040.004.07810
Xerox · WorkCentre 7845/7855 (IBG)075.080.004.07810
Xerox · WorkCentre 7970/7970i075.200.004.07810
Xerox · WorkCentre EC7836075.050.004.07810
Xerox · WorkCentre EC7856075.020.004.07810

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: OS Command Injection · Command and Code Injection
Vendor: Xerox
Published: October 2024
Band: Possible (1 to 10%), October 2024

CoverageNo articles yet

No CyberSIXT article names CVE-2024-6333 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.