Read the docs
TI-2021-09740 Aliases CVE-2021-28673GHSA-px8j-33x3-76gw

Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23…

Priority MEDIUM 46Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before 38.61.23 and 38.59.01 (Bridge), B600/B610 before 32.61.23 and 32.59.01 (Bridge), B605/B615 before 33.61.23 and 33.59.01 (Bridge), B7025/30/35 before 58.61.23 and 58.59.11 (Bridge), C400 before 67.61.23 and 67.59.01 (Bridge), C405 before 68.61.23 and 68.59.01 (Bridge), C500/C600 before 61.61.23 and 61.59.01 (Bridge), C505/C605 before 62.61.23 and 62.59.11 (Bridge), C7000 before 56.61.23 and 56.59.01 (Bridge), C7020/25/30 before 57.61.23 and 57.59.01 (Bridge), C8000/C9000 before 70.61.23 and 70.59.01 (Bridge), allows remote attackers with "a weaponized clone file" to execute arbitrary commands in the Web User Interface.

Why it matters now

EPSS 0.01938 80th percentileScored 2026-11-08
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 68

CPEVersionsRoleVendor
cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:*before 64.59.11VulnerableXerox
cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:*before 65.59.11VulnerableXerox
cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:*before 37.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:*before 38.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:*before 32.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
  • cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:* Versions before 64.59.11 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:* Versions before 65.59.11 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:* Versions before 37.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:* Versions before 38.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:* Versions before 32.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
Show 58 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:*before 32.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:*before 33.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:*before 33.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:*before 58.59.11VulnerableXerox
cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:*before 58.61.23VulnerableXerox
cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:*before 58.59.11VulnerableXerox
cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:*before 67.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:*before 68.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:*before 61.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:*before 61.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:*before 62.59.11VulnerableXerox
cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:*before 62.59.11VulnerableXerox
cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:*before 56.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:*before 57.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:*before 57.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:*before 57.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:*before 70.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:*before 70.59.01VulnerableXerox
cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:*not specified by NVDRunning onXerox
cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:*before 64.61.23VulnerableXerox
cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:*before 65.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:*before 37.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:*before 38.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:*before 32.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:*before 33.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:*before 33.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:*before 58.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:*before 67.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:*before 68.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:*before 61.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:*before 61.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:*before 62.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:*before 62.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:*before 56.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:*before 57.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:*before 57.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:*before 57.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:*before 70.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:*before 70.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:*before 32.61.23VulnerableXerox
cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:*before 58.61.23VulnerableXerox
  • cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:* Versions before 32.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:* Versions before 33.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:* Versions before 33.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:* Versions before 58.59.11 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:* Versions before 58.61.23 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:* Versions before 58.59.11 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:* Versions before 67.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:* Versions before 68.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:* Versions before 61.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:* Versions before 61.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:* Versions before 62.59.11 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:* Versions before 62.59.11 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:* Versions before 56.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:* Versions before 57.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:* Versions before 57.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:* Versions before 57.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:* Versions before 70.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:* Versions before 70.59.01 Vulnerable ·Xerox
  • cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Xerox
  • cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:* Versions before 64.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:* Versions before 65.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:* Versions before 37.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:* Versions before 38.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:* Versions before 32.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:* Versions before 33.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:* Versions before 33.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:* Versions before 58.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:* Versions before 67.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:* Versions before 68.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:* Versions before 61.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:* Versions before 61.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:* Versions before 62.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:* Versions before 62.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:* Versions before 56.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:* Versions before 57.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:* Versions before 57.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:* Versions before 57.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:* Versions before 70.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:* Versions before 70.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:* Versions before 32.61.23 Vulnerable ·Xerox
  • cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:* Versions before 58.61.23 Vulnerable ·Xerox

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-28673
  2. 2026-10-03 Alias added: GHSA-px8j-33x3-76gw

References

Advisory 1

  • TI-2021-09738 Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51… CVSS 3.1CRITICAL 9.8
  • TI-2021-09739 Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51… CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences