CVEvulnerability
CVE-2021-28673
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-03-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before 38.61.23 and 38.59.01 (Bridge), B600/B610 before 32.61.23 and 32.59.01 (Bridge), B605/B615 before 33.61.23 and 33.59.01 (Bridge), B7025/30/35 before 58.61.23 and 58.59.11 (Bridge), C400 before 67.61.23 and 67.59.01 (Bridge), C405 before 68.61.23 and 68.59.01 (Bridge), C500/C600 before 61.61.23 and 61.59.01 (Bridge), C505/C605 before 62.61.23 and 62.59.11 (Bridge), C7000 before 56.61.23 and 56.59.01 (Bridge), C7020/25/30 before 57.61.23 and 57.59.01 (Bridge), C8000/C9000 before 70.61.23 and 70.59.01 (Bridge), allows remote attackers with "a weaponized clone file" to execute arbitrary commands in the Web User Interface.
Affected configurations
• xerox phaser 6510 firmware (< 64.59.11)
• xerox workcentre 6515 firmware (< 65.59.11)
• xerox versalink b400 firmware (< 37.59.01)
• xerox versalink b405 firmware (< 38.59.01)
• xerox versalink b600 firmware (< 32.59.01)
• xerox versalink b610 firmware (< 32.59.01)
• xerox versalink b605 firmware (< 33.59.01)
• xerox versalink b615 firmware (< 33.59.01)
• xerox versalink b7025 firmware (< 58.59.11)
• xerox versalink b7030 firmware (< 58.61.23)
• xerox versalink b7035 firmware (< 58.59.11)
• xerox versalink c400 firmware (< 67.59.01)
• xerox versalink c405 firmware (< 68.59.01)
• xerox versalink c500 firmware (< 61.59.01)
• xerox versalink c600 firmware (< 61.59.01)
• xerox versalink c505 firmware (< 62.59.11)
• xerox versalink c605 firmware (< 62.59.11)
• xerox versalink c7000 firmware (< 56.59.01)
• xerox versalink c7020 firmware (< 57.59.01)
• xerox versalink c7025 firmware (< 57.59.01)
• xerox versalink c7030 firmware (< 57.59.01)
• xerox versalink c8000 firmware (< 70.59.01)
• xerox versalink c9000 firmware (< 70.59.01)
• xerox phaser 6510 firmware (< 64.61.23)
• xerox workcentre 6515 firmware (< 65.61.23)
• xerox versalink b400 firmware (< 37.61.23)
• xerox versalink b405 firmware (< 38.61.23)
• xerox versalink b610 firmware (< 32.61.23)
• xerox versalink b605 firmware (< 33.61.23)
• xerox versalink b615 firmware (< 33.61.23)
• xerox versalink b7025 firmware (< 58.61.23)
• xerox versalink c400 firmware (< 67.61.23)
• xerox versalink c405 firmware (< 68.61.23)
• xerox versalink c500 firmware (< 61.61.23)
• xerox versalink c600 firmware (< 61.61.23)
• xerox versalink c505 firmware (< 62.61.23)
• xerox versalink c605 firmware (< 62.61.23)
• xerox versalink c7000 firmware (< 56.61.23)
• xerox versalink c7020 firmware (< 57.61.23)
• xerox versalink c7025 firmware (< 57.61.23)
• xerox versalink c7030 firmware (< 57.61.23)
• xerox versalink c8000 firmware (< 70.61.23)
• xerox versalink c9000 firmware (< 70.61.23)
• xerox versalink b600 firmware (< 32.61.23)
• xerox versalink b7035 firmware (< 58.61.23)
References
- https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20K_for_PH6510_WC6515_VLB4xx_C4xx_B6XX_B70xx_C5xx_C6xx_C7xxx.pdf Vendor Advisory
- https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20K_for_PH6510_WC6515_VLB4xx_C4xx_B6XX_B70xx_C5xx_C6xx_C7xxx.pdf Vendor Advisory