Read the docs
TI-2024-05877 Aliases CVE-2024-6333GHSA-8xf6-75qf-44g2

Command injection in Xerox AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 /…

Priority LOW 36CWE-77Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-77.

Summary

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0117 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
XeroxAltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807103.xxx.024.18600—No fix listedCNA
XeroxXerox® EC8036 / EC8056103.xxx.024.18600—No fix listedCNA
XeroxXerox® EC8036 / EC8056 - Common Criteria (June 2022)103.023.031.35105—No fix listedCNA
XeroxXerox® EC8036 / EC8056 - Common Criteria (June 2024)103.xxx.013.14115—No fix listedCNA
XeroxAltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024)119.xxx.023.13006—No fix listedCNA
XeroxAltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023)111.xxx.003.11600—No fix listedCNA
XeroxVersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024)119.xxx.003.11705—No fix listedCNA
XeroxWorkCentre 3655/3655i075.060.004.07810—No fix listedCNA
XeroxWorkCentre 5945/55i075.091.004.07810—No fix listedCNA
XeroxWorkCentre 6655/6655i075.110.004.07810—No fix listedCNA
XeroxWorkCentre 7220/7225i075.030.004.07810—No fix listedCNA
XeroxWorkCentre 7830/7835i075.010 004.07810—No fix listedCNA
XeroxWorkCentre 7845/7855i075.040.004.07810—No fix listedCNA
XeroxWorkCentre 7845/7855 (IBG)075.080.004.07810—No fix listedCNA
XeroxWorkCentre 7970/7970i075.200.004.07810—No fix listedCNA
XeroxWorkCentre EC7836075.050.004.07810—No fix listedCNA
XeroxWorkCentre EC7856075.020.004.07810—No fix listedCNA
  • AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807 VendorXerox Affected 103.xxx.024.18600 Fixed in — No fix listed CNA
  • Xerox® EC8036 / EC8056 VendorXerox Affected 103.xxx.024.18600 Fixed in — No fix listed CNA
  • Xerox® EC8036 / EC8056 - Common Criteria (June 2022) VendorXerox Affected 103.023.031.35105 Fixed in — No fix listed CNA
  • Xerox® EC8036 / EC8056 - Common Criteria (June 2024) VendorXerox Affected 103.xxx.013.14115 Fixed in — No fix listed CNA
  • AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024) VendorXerox Affected 119.xxx.023.13006 Fixed in — No fix listed CNA
  • AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023) VendorXerox Affected 111.xxx.003.11600 Fixed in — No fix listed CNA
  • VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024) VendorXerox Affected 119.xxx.003.11705 Fixed in — No fix listed CNA
  • WorkCentre 3655/3655i VendorXerox Affected 075.060.004.07810 Fixed in — No fix listed CNA
  • WorkCentre 5945/55i VendorXerox Affected 075.091.004.07810 Fixed in — No fix listed CNA
  • WorkCentre 6655/6655i VendorXerox Affected 075.110.004.07810 Fixed in — No fix listed CNA
  • WorkCentre 7220/7225i VendorXerox Affected 075.030.004.07810 Fixed in — No fix listed CNA
  • WorkCentre 7830/7835i VendorXerox Affected 075.010 004.07810 Fixed in — No fix listed CNA
  • WorkCentre 7845/7855i VendorXerox Affected 075.040.004.07810 Fixed in — No fix listed CNA
  • WorkCentre 7845/7855 (IBG) VendorXerox Affected 075.080.004.07810 Fixed in — No fix listed CNA
  • WorkCentre 7970/7970i VendorXerox Affected 075.200.004.07810 Fixed in — No fix listed CNA
  • WorkCentre EC7836 VendorXerox Affected 075.050.004.07810 Fixed in — No fix listed CNA
  • WorkCentre EC7856 VendorXerox Affected 075.020.004.07810 Fixed in — No fix listed CNA

CPE names CISA-ADP · 4

CPEVersionsRoleVendor
cpe:2.3:o:xerox:altalink_firmware:*:*:*:*:*:*:*:*——Xerox
cpe:2.3:o:xerox:versalink_firmware:*:*:*:*:*:*:*:*——Xerox
cpe:2.3:o:xerox:workcentre_firmware:*:*:*:*:*:*:*:*——Xerox
cpe:2.3:o:xerox:xerox_firmware:*:*:*:*:*:*:*:*——Xerox
  • cpe:2.3:o:xerox:altalink_firmware:*:*:*:*:*:*:*:* Versions — — ·Xerox
  • cpe:2.3:o:xerox:versalink_firmware:*:*:*:*:*:*:*:* Versions — — ·Xerox
  • cpe:2.3:o:xerox:workcentre_firmware:*:*:*:*:*:*:*:* Versions — — ·Xerox
  • cpe:2.3:o:xerox:xerox_firmware:*:*:*:*:*:*:*:* Versions — — ·Xerox

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-6333
  2. 2026-10-03 Alias added: GHSA-8xf6-75qf-44g2

References

Other 1

  • TI-2025-07651 Path Traversal leading to RCE CVSS 3.1CRITICAL 9.8
  • TI-2008-03418 The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via… CVSS 2.0HIGH 7.8
  • TI-2019-08103 OS command injection in Xerox AltaLink B8045/B8055/B8065/B8075/B8090 CVSS 3.0CRITICAL 9.8
  • TI-2025-07650 XXE leading to SSRF CVSS 3.1HIGH 7.5
  • TI-2026-01898 Path Traversal leading to Remote Code Execution (RCE) CVSS 3.1CRITICAL 9.8
  • TI-2009-01572 Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632… CVSS 2.0HIGH 10.0
See all 123 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences