Back to Database
Status published
High
CVE-2024-6333
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products
Vulnerability Description
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6333
Credits & Attribution
No credits recorded in the NVD database.
More from Xerox
View All →CVE-2025-8356
Path Traversal leading to RCE
Critical
9.8
CVE-2025-8355
XXE leading to SSRF
High
7.5
CVE-2025-1984
Local Privilege Escalation on Xerox® Desktop Print Experience® v8.5
Medium
5.2
CVE-2024-55931
Token stored in session storage
Medium
6.5
CVE-2024-55930
Weak default folder permissions
Medium
6.7
Affected Vendor
Xerox
View all reports →Affected Software
AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807, Xerox® EC8036 / EC8056, Xerox® EC8036 / EC8056 - Common Criteria (June 2022), Xerox® EC8036 / EC8056 - Common Criteria (June 2024), AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024), AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023), VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024), WorkCentre 3655/3655i, WorkCentre 5945/55i, WorkCentre 6655/6655i, WorkCentre 7220/7225i, WorkCentre 7830/7835i, WorkCentre 7845/7855i, WorkCentre 7845/7855 (IBG), WorkCentre 7970/7970i, WorkCentre EC7836, WorkCentre EC7856
Vulnerable Versions:
103.xxx.024.18600, 103.023.031.35105, 103.xxx.013.14115, 119.xxx.023.13006, 111.xxx.003.11600, 119.xxx.003.11705, 075.060.004.07810, 075.091.004.07810, 075.110.004.07810, 075.030.004.07810, 075.010 004.07810, 075.040.004.07810, 075.080.004.07810, 075.200.004.07810, 075.050.004.07810, 075.020.004.07810
Timeline
Official Publish:
October 17th, 2024
Last Modified:
September 17th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK TTPs
T1190
Exploit Public-Facing Application
Initial Access
T1059
Command and Scripting Interpreter
Execution
T1068
Exploitation for Privilege Escalation
Privilege Escalation
T1005
Data from Local System
Collection
T1041
Exfiltration Over C2 Channel
Exfiltration
T1105
Ingress Tool Transfer
Command and Control