Xerox Versalink c500 Firmware vulnerabilities

3 CVEs affecting Xerox Versalink c500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-28672, published 2021-03-29.

More from Xerox.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-28671, published 2021-03-29. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01…
• CVE-2021-28672, published 2021-03-29. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01…
• CVE-2021-28673, published 2021-03-29. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before 38.61.23 and 38.59.01…