What’s Vulnerable › Vulnerabilities

CVE-2024-6333: Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-17 · updated 2026-06-17
• Weakness: CWE-77

Description

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.

Affected products

• Xerox Altalink Firmware: before 103.xxx.024.18600; before 119.xxx.023.13006; before 111.xxx.003.11600 — fixed in 103.xxx.024.18600, 111.xxx.003.11600, 119.xxx.023.13006
• Xerox Versalink Firmware: before 119.xxx.003.11705 — fixed in 119.xxx.003.11705
• Xerox Workcentre Firmware: before 075.060.004.07810; before 075.091.004.07810; before 075.110.004.07810; before 075.030.004.07810; before 075.010 004.07810; before 075.040.004.07810 — fixed in 075.010 004.07810, 075.020.004.07810, 075.030.004.07810, 075.040.004.07810, 075.050.004.07810, 075.060.004.07810
• Xerox Firmware: before 103.xxx.024.18600; before 103.023.031.35105; before 103.xxx.013.14115 — fixed in 103.023.031.35105, 103.xxx.013.14115, 103.xxx.024.18600

How to fix

Upgrade to a fixed version: Xerox Altalink Firmware 103.xxx.024.18600, 111.xxx.003.11600, 119.xxx.023.13006; Xerox Versalink Firmware 119.xxx.003.11705; Xerox Workcentre Firmware 075.010 004.07810, 075.020.004.07810, 075.030.004.07810, 075.040.004.07810; Xerox Firmware 103.023.031.35105, 103.xxx.013.14115, 103.xxx.024.18600. Check the vendor advisory for mitigations.

References

• https://securitydocs.business.xerox.com/wp-content/uploads/2024/10/Xerox-Security-Bulletin-XRX24-015-for-Altalink-Versalink-and-WorkCentre-%E2%80%93-CVE-2024-6333-.pdf
• http://seclists.org/fulldisclosure/2024/Oct/17

Get alerted when CVE-2024-6333 or the next vulnerability affects your stack