CVE-2021-28670: Xerox Altalink b8045 Firmware

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk.

Affected products

• Xerox Altalink b8045 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink b8055 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink b8065 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink b8075 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink b8090 Firmware: before 103.008.020.23120 (fixed in 103.008.020.23120)
• Xerox Altalink c8030 Firmware: before 103.001.020.23120 (fixed in 103.001.020.23120)
• Xerox Altalink c8035 Firmware: before 103.001.020.23120 (fixed in 103.001.020.23120)
• Xerox Altalink c8045 Firmware: before 103.002.020.23120 (fixed in 103.002.020.23120)
• Xerox Altalink c8055 Firmware: before 103.002.020.23120 (fixed in 103.002.020.23120)
• Xerox Altalink c8070 Firmware: before 103.003.020.23120 (fixed in 103.003.020.23120)

Published 2021-03-29. Last modified 2026-06-17.