{"schemaVersion":3,"id":"CVE-2024-6333","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.","dates":{"published":"2024-10-17T13:51:16.011Z","modified":"2025-09-17T16:52:52.859Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.2,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.2,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.2,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0117,"percentile":0.66951,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.0117},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0116,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0116,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0116,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0116,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0116,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0116,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0117,"percentile":0.66951}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0117,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0117,"percentile":0.66951}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command ('Command Injection')","description":"The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/77.html"},{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","description":"The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/78.html"}],"affected":[{"vendor":"xerox","product":"altalink® b8045 / b8055 / b8065 / b8075 / b8090 | c8030 / c8035 / c8045 / c8055 / c807","name":"AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807","label":"altalink® b8045 / b8055 / b8065 / b8075 / b8090 | c8030 / c8035 / c8045 / c8055 / c807","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"103.xxx.024.18600","noFixRecorded":false,"fixedIn":null}],"versionsText":"103.xxx.024.18600","eol":null,"hubHref":"/vendor/xerox/altalink_b8045__b8055__b8065__b8075__b8090__c8030__c8035__c8045__c8055__c807"},{"vendor":"xerox","product":"altalink® c8130 / c8135 / c8145 / c8155 / c8170 | b8145 / b8155 / b8170 common criteria certified (aug 2023)","name":"AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023)","label":"altalink® c8130 / c8135 / c8145 / c8155 / c8170 | b8145 / b8155 / b8170 common criteria certified (aug 2023)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"111.xxx.003.11600","noFixRecorded":false,"fixedIn":null}],"versionsText":"111.xxx.003.11600","eol":null,"hubHref":"/vendor/xerox/altalink_c8130__c8135__c8145__c8155__c8170__b8145__b8155__b8170_common_criteria_certified_aug_2023"},{"vendor":"xerox","product":"altalink®c8130 / c8135 / c8145 / c8155 / c8170 | b8145 / b8155 / b8170 common criteria (aug 2024)","name":"AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024)","label":"altalink®c8130 / c8135 / c8145 / c8155 / c8170 | b8145 / b8155 / b8170 common criteria (aug 2024)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"119.xxx.023.13006","noFixRecorded":false,"fixedIn":null}],"versionsText":"119.xxx.023.13006","eol":null,"hubHref":"/vendor/xerox/altalinkc8130__c8135__c8145__c8155__c8170__b8145__b8155__b8170_common_criteria_aug_2024"},{"vendor":"xerox","product":"versalink® b625 / c625 | b425 / c425 common criteria certified (2024)","name":"VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024)","label":"versalink® b625 / c625 | b425 / c425 common criteria certified (2024)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"119.xxx.003.11705","noFixRecorded":false,"fixedIn":null}],"versionsText":"119.xxx.003.11705","eol":null,"hubHref":"/vendor/xerox/versalink_b625__c625__b425__c425_common_criteria_certified_2024"},{"vendor":"xerox","product":"workcentre 3655/3655i","name":"WorkCentre 3655/3655i","label":"workcentre 3655/3655i","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"075.060.004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.060.004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_36553655i"},{"vendor":"xerox","product":"workcentre 5945/55i","name":"WorkCentre 5945/55i","label":"workcentre 5945/55i","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"075.091.004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.091.004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_594555i"},{"vendor":"xerox","product":"workcentre 6655/6655i","name":"WorkCentre 6655/6655i","label":"workcentre 6655/6655i","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"075.110.004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.110.004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_66556655i"},{"vendor":"xerox","product":"workcentre 7220/7225i","name":"WorkCentre 7220/7225i","label":"workcentre 7220/7225i","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"075.030.004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.030.004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_72207225i"},{"vendor":"xerox","product":"workcentre 7830/7835i","name":"WorkCentre 7830/7835i","label":"workcentre 7830/7835i","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"075.010 004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.010 004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_78307835i"},{"vendor":"xerox","product":"workcentre 7845/7855 (ibg)","name":"WorkCentre 7845/7855 (IBG)","label":"workcentre 7845/7855 (ibg)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"075.080.004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.080.004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_78457855_ibg"},{"vendor":"xerox","product":"workcentre 7845/7855i","name":"WorkCentre 7845/7855i","label":"workcentre 7845/7855i","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"075.040.004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.040.004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_78457855i"},{"vendor":"xerox","product":"workcentre 7970/7970i","name":"WorkCentre 7970/7970i","label":"workcentre 7970/7970i","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"075.200.004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.200.004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_79707970i"},{"vendor":"xerox","product":"workcentre_ec7836_firmware","name":"workcentre ec7836 firmware","label":"workcentre_ec7836_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"075.050.004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.050.004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_ec7836"},{"vendor":"xerox","product":"workcentre_ec7856_firmware","name":"workcentre ec7856 firmware","label":"workcentre_ec7856_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"075.020.004.07810","noFixRecorded":false,"fixedIn":null}],"versionsText":"075.020.004.07810","eol":null,"hubHref":"/vendor/xerox/workcentre_ec7856"},{"vendor":"xerox","product":"xerox® ec8036 / ec8056","name":"Xerox® EC8036 / EC8056","label":"xerox® ec8036 / ec8056","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"103.xxx.024.18600","noFixRecorded":false,"fixedIn":null}],"versionsText":"103.xxx.024.18600","eol":null,"hubHref":"/vendor/xerox/xerox_ec8036__ec8056"},{"vendor":"xerox","product":"xerox® ec8036 / ec8056 - common criteria (june 2022)","name":"Xerox® EC8036 / EC8056 - Common Criteria (June 2022)","label":"xerox® ec8036 / ec8056 - common criteria (june 2022)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"103.023.031.35105","noFixRecorded":false,"fixedIn":null}],"versionsText":"103.023.031.35105","eol":null,"hubHref":"/vendor/xerox/xerox_ec8036__ec8056_-_common_criteria_june_2022"},{"vendor":"xerox","product":"xerox® ec8036 / ec8056 - common criteria (june 2024)","name":"Xerox® EC8036 / EC8056 - Common Criteria (June 2024)","label":"xerox® ec8036 / ec8056 - common criteria (june 2024)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"103.xxx.013.14115","noFixRecorded":false,"fixedIn":null}],"versionsText":"103.xxx.013.14115","eol":null,"hubHref":"/vendor/xerox/xerox_ec8036__ec8056_-_common_criteria_june_2024"}],"affectedCount":17,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2024/10/Xerox-Security-Bulletin-XRX24-015-for-Altalink-Versalink-and-WorkCentre-%E2%80%93-CVE-2024-6333-.pdf","label":"securitydocs.business.xerox.com/wp-content/…","hostname":"securitydocs.business.xerox.com","tags":[]},{"url":"http://seclists.org/fulldisclosure/2024/Oct/17","label":"seclists.org/fulldisclosure/2024/Oct/17","hostname":"seclists.org","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-10-17T13:51:16.011Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-09-17T16:52:52.859Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":29,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T09:28:13.833Z","stale":false,"partial":false}}