CVE-2021-28668: Xerox Altalink b8045 Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities.

Affected products

• Xerox Altalink b8045 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink b8055 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink b8065 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink b8075 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink b8090 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink c8030 Firmware: before 103.001.020.23120 (fixed in 103.001.020.23120)
• Xerox Altalink c8035 Firmware: before 103.001.020.23120 (fixed in 103.001.020.23120)
• Xerox Altalink c8045 Firmware: before 103.002.020.23120 (fixed in 103.002.020.23120)
• Xerox Altalink c8055 Firmware: before 103.002.020.23120 (fixed in 103.002.020.23120)
• Xerox Altalink c8070 Firmware: before 103.003.020.23120 (fixed in 103.003.020.23120)

Published 2021-03-29. Last modified 2026-06-17.