{"schemaVersion":3,"id":"CVE-2021-28671","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (Bridge), B7025/30/35 before 58.65.51 and 58.59.11 (Bridge), C400 before 67.65.51 and 67.59.01 (Bridge), C405 before 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59.01 (Bridge), C7000 before 56.65.51 and 56.59.01 (Bridge), C7020/25/30 before 57.65.51 and 57.59.01 (Bridge), C8000/C9000 before 70.65.51 and 70.59.01 (Bridge), C8000W before 72.65.51 have a remote Command Execution vulnerability in the Web User Interface that allows remote attackers with \"a weaponized clone file\" to execute arbitrary commands.","dates":{"published":"2021-03-29T20:06:50.000Z","modified":"2024-08-03T21:47:33.122Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02666,"percentile":0.85531,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.09200000000000007,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.02574},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02553,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02553,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02553,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02553,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02553,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02553,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02666,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02666,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02666,"percentile":0.85531}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02574,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02666,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02666,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02666,"percentile":0.85531}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"xerox","product":"phaser_6510_firmware","name":"phaser 6510 firmware","label":"phaser_6510_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 64.59.11","noFixRecorded":false,"fixedIn":null},{"text":"< 64.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 64.59.11 | < 64.65.51","eol":null,"hubHref":"/vendor/xerox/phaser_6510"},{"vendor":"xerox","product":"versalink_b400_firmware","name":"versalink b400 firmware","label":"versalink_b400_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 37.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 37.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.59.01 | < 37.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_b400"},{"vendor":"xerox","product":"versalink_b405_firmware","name":"versalink b405 firmware","label":"versalink_b405_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 38.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 38.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 38.59.01 | < 38.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_b405"},{"vendor":"xerox","product":"versalink_b600_firmware","name":"versalink b600 firmware","label":"versalink_b600_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 32.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 32.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.59.01 | < 32.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_b600"},{"vendor":"xerox","product":"versalink_b605_firmware","name":"versalink b605 firmware","label":"versalink_b605_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 33.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 33.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 33.59.01 | < 33.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_b605"},{"vendor":"xerox","product":"versalink_b610_firmware","name":"versalink b610 firmware","label":"versalink_b610_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 32.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 32.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.59.01 | < 32.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_b610"},{"vendor":"xerox","product":"versalink_b615_firmware","name":"versalink b615 firmware","label":"versalink_b615_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 33.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 33.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 33.59.01 | < 33.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_b615"},{"vendor":"xerox","product":"versalink_b7025_firmware","name":"versalink b7025 firmware","label":"versalink_b7025_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 58.59.11","noFixRecorded":false,"fixedIn":null},{"text":"< 58.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 58.59.11 | < 58.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_b7025"},{"vendor":"xerox","product":"versalink_b7030_firmware","name":"versalink b7030 firmware","label":"versalink_b7030_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 58.59.11","noFixRecorded":false,"fixedIn":null},{"text":"< 58.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 58.59.11 | < 58.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_b7030"},{"vendor":"xerox","product":"versalink_b7035_firmware","name":"versalink b7035 firmware","label":"versalink_b7035_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 58.59.11","noFixRecorded":false,"fixedIn":null},{"text":"< 58.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 58.59.11 | < 58.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_b7035"},{"vendor":"xerox","product":"versalink_c400_firmware","name":"versalink c400 firmware","label":"versalink_c400_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 67.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 67.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 67.59.01 | < 67.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c400"},{"vendor":"xerox","product":"versalink_c405_firmware","name":"versalink c405 firmware","label":"versalink_c405_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 68.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 68.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 68.59.01 | < 68.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c405"},{"vendor":"xerox","product":"versalink_c500_firmware","name":"versalink c500 firmware","label":"versalink_c500_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 61.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 61.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 61.59.01 | < 61.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c500"},{"vendor":"xerox","product":"versalink_c505_firmware","name":"versalink c505 firmware","label":"versalink_c505_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 62.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 62.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 62.59.01 | < 62.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c505"},{"vendor":"xerox","product":"versalink_c600_firmware","name":"versalink c600 firmware","label":"versalink_c600_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 61.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 61.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 61.59.01 | < 61.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c600"},{"vendor":"xerox","product":"versalink_c605_firmware","name":"versalink c605 firmware","label":"versalink_c605_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 62.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 62.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 62.59.01 | < 62.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c605"},{"vendor":"xerox","product":"versalink_c7000_firmware","name":"versalink c7000 firmware","label":"versalink_c7000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 56.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 56.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 56.59.01 | < 56.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c7000"},{"vendor":"xerox","product":"versalink_c7020_firmware","name":"versalink c7020 firmware","label":"versalink_c7020_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 57.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 57.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 57.59.01 | < 57.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c7020"},{"vendor":"xerox","product":"versalink_c7025_firmware","name":"versalink c7025 firmware","label":"versalink_c7025_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 57.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 57.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 57.59.01 | < 57.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c7025"},{"vendor":"xerox","product":"versalink_c7030_firmware","name":"versalink c7030 firmware","label":"versalink_c7030_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 57.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 57.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 57.59.01 | < 57.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c7030"},{"vendor":"xerox","product":"versalink_c8000_firmware","name":"versalink c8000 firmware","label":"versalink_c8000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 70.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 70.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 70.59.01 | < 70.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c8000"},{"vendor":"xerox","product":"versalink_c8000w_firmware","name":"versalink c8000w firmware","label":"versalink_c8000w_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 72.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 72.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c8000w"},{"vendor":"xerox","product":"versalink_c9000_firmware","name":"versalink c9000 firmware","label":"versalink_c9000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 70.59.01","noFixRecorded":false,"fixedIn":null},{"text":"< 70.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 70.59.01 | < 70.65.51","eol":null,"hubHref":"/vendor/xerox/versalink_c9000"},{"vendor":"xerox","product":"workcentre_6515_firmware","name":"workcentre 6515 firmware","label":"workcentre_6515_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 65.59.11","noFixRecorded":false,"fixedIn":null},{"text":"< 65.65.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 65.59.11 | < 65.65.51","eol":null,"hubHref":"/vendor/xerox/workcentre_6515"}],"affectedCount":24,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX21D_for_PH6510_WC6515_VersaLink-1.pdf","label":"securitydocs.business.xerox.com/wp-content/…","hostname":"securitydocs.business.xerox.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-03-29T20:06:50.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-03T21:47:33.122Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T20:16:37.107Z","stale":false,"partial":false}}