Xerox Versalink c7025 Firmware vulnerabilities

4 CVEs affecting Xerox Versalink c7025 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46327, published 2023-11-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-28671, published 2021-03-29. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01…
CVE-2021-28672, published 2021-03-29. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01…
CVE-2021-28673, published 2021-03-29. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before 38.61.23 and 38.59.01…
CVE-2023-46327, published 2023-11-02. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but…