{"id":"CVE-2024-6333","aliases":["EUVD-2024-47447","GHSA-8xf6-75qf-44g2"],"status":"published","title":"Authenticated Remote Code Execution in Altalink, Versalink \u0026 WorkCentre Products","description":"Authenticated Remote Code Execution in Altalink, Versalink \u0026 WorkCentre Products.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0117,"percentile":0.67812,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20","CWE-77","CWE-78"],"published":"2024-10-17T13:51:16Z","modified":"2026-06-17T08:17:47Z","exploits":[{"source":"pocgithub","id":"0xQRx/CVE-2024-6333","title":"0xQRx/CVE-2024-6333","date":"2026-02-11","url":"https://github.com/0xQRx/CVE-2024-6333"}],"products":[{"vendor":"xerox","product":"altalink_firmware"},{"vendor":"xerox","product":"altalink® b8045 / b8055 / b8065 / b8075 / b8090 | c8030 / c8035 / c8045 / c8055 / c807"},{"vendor":"xerox","product":"altalink® c8130 / c8135 / c8145 / c8155 / c8170 | b8145 / b8155 / b8170 common criteria certified (aug 2023)"},{"vendor":"xerox","product":"altalink®c8130 / c8135 / c8145 / c8155 / c8170 | b8145 / b8155 / b8170 common criteria (aug 2024)"},{"vendor":"xerox","product":"versalink_firmware"},{"vendor":"xerox","product":"versalink® b625 / c625 | b425 / c425 common criteria certified (2024)"},{"vendor":"xerox","product":"workcentre 3655/3655i"},{"vendor":"xerox","product":"workcentre 5945/55i"},{"vendor":"xerox","product":"workcentre 6655/6655i"},{"vendor":"xerox","product":"workcentre 7220/7225i"},{"vendor":"xerox","product":"workcentre 7830/7835i"},{"vendor":"xerox","product":"workcentre 7845/7855 (ibg)"},{"vendor":"xerox","product":"workcentre 7845/7855i"},{"vendor":"xerox","product":"workcentre 7970/7970i"},{"vendor":"xerox","product":"workcentre ec7836"},{"vendor":"xerox","product":"workcentre ec7856"},{"vendor":"xerox","product":"workcentre_firmware"},{"vendor":"xerox","product":"xerox_firmware"},{"vendor":"xerox","product":"xerox® ec8036 / ec8056"},{"vendor":"xerox","product":"xerox® ec8036 / ec8056 - common criteria (june 2022)"},{"vendor":"xerox","product":"xerox® ec8036 / ec8056 - common criteria (june 2024)"}],"references":[{"url":"https://securitydocs.business.xerox.com/wp-content/uploads/2024/10/Xerox-Security-Bulletin-XRX24-015-for-Altalink-Versalink-and-WorkCentre-%E2%80%93-CVE-2024-6333-.pdf"},{"url":"http://seclists.org/fulldisclosure/2024/Oct/17"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6333"},{"url":"https://github.com/advisories/GHSA-8xf6-75qf-44g2"}],"sources":{"cve":[{"id":"CVE-2024-6333","title":"Authenticated Remote Code Execution in Altalink, Versalink \u0026 WorkCentre Products","description":"Authenticated Remote Code Execution in Altalink, Versalink \u0026 WorkCentre Products.","status":"published","published":"2024-10-17T13:51:16.011Z","modified":"2025-09-17T16:52:52.859Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78","CWE-77"],"updated_at":"2026-11-02T14:34:11.638716Z"}],"euvd":[{"id":"EUVD-2024-47447","description":"Authenticated Remote Code Execution in Altalink, Versalink \u0026 WorkCentre Products.","status":"published","published":"2024-10-17T13:51:16Z","modified":"2025-09-17T16:52:52Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:31:42.206486Z"}],"ghsa":[{"id":"GHSA-8xf6-75qf-44g2","title":"Authenticated Remote Code Execution in Altalink, Versalink \u0026 WorkCentre Products.","description":"Authenticated Remote Code Execution in Altalink, Versalink \u0026 WorkCentre Products.","status":"published","published":"2024-10-17T15:31:08Z","modified":"2025-09-17T18:32:20Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20","CWE-77"],"updated_at":"2026-11-02T15:03:38.691888Z"}],"nvd":[{"id":"CVE-2024-6333","description":"Authenticated Remote Code Execution in Altalink, Versalink \u0026 WorkCentre Products.","status":"published","published":"2024-10-17T14:15:14.287Z","modified":"2026-06-17T08:17:47.903Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-77","CWE-78"],"updated_at":"2026-11-02T14:10:32.45889Z"}]}}