CVEvulnerability

CVE-2021-28671

9.8 CRITICAL Published 2021-03-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-03-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (Bridge), B7025/30/35 before 58.65.51 and 58.59.11 (Bridge), C400 before 67.65.51 and 67.59.01 (Bridge), C405 before 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59.01 (Bridge), C7000 before 56.65.51 and 56.59.01 (Bridge), C7020/25/30 before 57.65.51 and 57.59.01 (Bridge), C8000/C9000 before 70.65.51 and 70.59.01 (Bridge), C8000W before 72.65.51 have a remote Command Execution vulnerability in the Web User Interface that allows remote attackers with "a weaponized clone file" to execute arbitrary commands.

Affected configurations

• xerox phaser 6510 firmware (< 64.59.11) • xerox workcentre 6515 firmware (< 65.59.11) • xerox versalink b400 firmware (< 37.59.01) • xerox versalink b405 firmware (< 38.59.01) • xerox versalink b600 firmware (< 32.59.01) • xerox versalink b610 firmware (< 32.59.01) • xerox versalink b605 firmware (< 33.59.01) • xerox versalink b615 firmware (< 33.59.01) • xerox versalink b7025 firmware (< 58.59.11) • xerox versalink b7030 firmware (< 58.59.11) • xerox versalink b7035 firmware (< 58.59.11) • xerox versalink c400 firmware (< 67.59.01) • xerox versalink c405 firmware (< 68.59.01) • xerox versalink c500 firmware (< 61.59.01) • xerox versalink c600 firmware (< 61.59.01) • xerox versalink c505 firmware (< 62.59.01) • xerox versalink c605 firmware (< 62.59.01) • xerox versalink c7000 firmware (< 56.59.01) • xerox versalink c7020 firmware (< 57.59.01) • xerox versalink c7025 firmware (< 57.59.01) • xerox versalink c7030 firmware (< 57.59.01) • xerox versalink c8000 firmware (< 70.59.01) • xerox versalink c9000 firmware (< 70.59.01) • xerox phaser 6510 firmware (< 64.65.51) • xerox workcentre 6515 firmware (< 65.65.51) • xerox versalink b400 firmware (< 37.65.51) • xerox versalink b405 firmware (< 38.65.51) • xerox versalink b610 firmware (< 32.65.51) • xerox versalink b605 firmware (< 33.65.51) • xerox versalink b615 firmware (< 33.65.51) • xerox versalink b7025 firmware (< 58.65.51) • xerox versalink c400 firmware (< 67.65.51) • xerox versalink c405 firmware (< 68.65.51) • xerox versalink c500 firmware (< 61.65.51) • xerox versalink c600 firmware (< 61.65.51) • xerox versalink c505 firmware (< 62.65.51) • xerox versalink c605 firmware (< 62.65.51) • xerox versalink c7000 firmware (< 56.65.51) • xerox versalink c7020 firmware (< 57.65.51) • xerox versalink c7025 firmware (< 57.65.51) • xerox versalink c7030 firmware (< 57.65.51) • xerox versalink c8000 firmware (< 70.65.51) • xerox versalink c9000 firmware (< 70.65.51) • xerox versalink c8000w firmware (< 72.65.51) • xerox versalink b600 firmware (< 32.65.51) • xerox versalink b7030 firmware (< 58.65.51) • xerox versalink b7035 firmware (< 58.65.51)

References