Xerox Versalink Firmware vulnerabilities

2 CVEs affecting Xerox Versalink Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6333, published 2024-10-17.

More from Xerox.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-23968, published 2022-01-26. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a…
• CVE-2024-6333, published 2024-10-17. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.