Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51…
Priority MEDIUM 47Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (Bridge), B7025/30/35 before 58.65.51 and 58.59.11 (Bridge), C400 before 67.65.51 and 67.59.01 (Bridge), C405 before 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59.01 (Bridge), C7000 before 56.65.51 and 56.59.01 (Bridge), C7020/25/30 before 57.65.51 and 57.59.01 (Bridge), C8000/C9000 before 70.65.51 and 70.59.01 (Bridge), C8000W before 72.65.51 have a remote Command Execution vulnerability in the Web User Interface that allows remote attackers with "a weaponized clone file" to execute arbitrary commands.
Why it matters now
EPSS 0.02666 85th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 71
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:* | before 64.59.11 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:* | before 65.59.11 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:* | before 37.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:* | before 38.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:* | before 32.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
- cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:* Versions before 64.59.11 Vulnerable ·Xerox
- cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:* Versions before 65.59.11 Vulnerable ·Xerox
- cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:* Versions before 37.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:* Versions before 38.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:* Versions before 32.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
Show 61 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:* | before 32.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:* | before 33.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:* | before 33.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:* | before 58.59.11 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:* | before 58.59.11 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:* | before 58.59.11 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:* | before 67.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:* | before 68.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:* | before 61.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:* | before 61.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:* | before 62.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:* | before 62.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:* | before 56.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:* | before 57.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:* | before 57.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:* | before 57.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:* | before 70.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:* | before 70.59.01 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:* | before 64.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:* | before 65.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:* | before 37.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:* | before 38.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:* | before 32.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:* | before 33.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:* | before 33.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:* | before 58.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:* | before 67.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:* | before 68.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:* | before 61.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:* | before 61.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:* | before 62.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:* | before 62.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:* | before 56.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:* | before 57.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:* | before 57.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:* | before 57.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:* | before 70.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:* | before 70.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_c8000w_firmware:*:*:*:*:*:*:*:* | before 72.65.51 | Vulnerable | Xerox |
| cpe:2.3:h:xerox:versalink_c8000w:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Xerox |
| cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:* | before 32.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:* | before 58.65.51 | Vulnerable | Xerox |
| cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:* | before 58.65.51 | Vulnerable | Xerox |
- cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:* Versions before 32.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:* Versions before 33.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:* Versions before 33.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:* Versions before 58.59.11 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:* Versions before 58.59.11 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:* Versions before 58.59.11 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:* Versions before 67.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:* Versions before 68.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:* Versions before 61.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:* Versions before 61.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:* Versions before 62.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:* Versions before 62.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:* Versions before 56.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:* Versions before 57.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:* Versions before 57.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:* Versions before 57.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:* Versions before 70.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:* Versions before 70.59.01 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:* Versions before 64.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:* Versions before 65.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:* Versions before 37.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:* Versions before 38.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:* Versions before 32.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:* Versions before 33.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:* Versions before 33.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:* Versions before 58.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:* Versions before 67.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:* Versions before 68.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:* Versions before 61.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:* Versions before 61.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:* Versions before 62.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:* Versions before 62.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:* Versions before 56.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:* Versions before 57.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:* Versions before 57.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:* Versions before 57.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:* Versions before 70.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:* Versions before 70.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_c8000w_firmware:*:*:*:*:*:*:*:* Versions before 72.65.51 Vulnerable ·Xerox
- cpe:2.3:h:xerox:versalink_c8000w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
- cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:* Versions before 32.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:* Versions before 58.65.51 Vulnerable ·Xerox
- cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:* Versions before 58.65.51 Vulnerable ·Xerox
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-28671
- 2026-10-03 Alias added: GHSA-3cf9-mw3j-379r
References
More Xerox Phaser 6510 Firmware vulnerabilities
- TI-2021-09740 Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23… CVSS 3.1CRITICAL 9.8
- TI-2021-09739 Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2021-28671 · CVE Program
- CVE-2021-28671 · NVD
- FIRST EPSS
- GHSA-3cf9-mw3j-379r · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences