Description
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xerox | AltaLink® B8045 / B8055 / B8065 / B8075 / B8090 | C8030 / C8035 / C8045 / C8055 / C807 | 103.xxx.024.18600 | — |
| Xerox | Xerox® EC8036 / EC8056 | 103.xxx.024.18600 | — |
| Xerox | Xerox® EC8036 / EC8056 - Common Criteria (June 2022) | 103.023.031.35105 | — |
| Xerox | Xerox® EC8036 / EC8056 - Common Criteria (June 2024) | 103.xxx.013.14115 | — |
| Xerox | AltaLink®C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria (Aug 2024) | 119.xxx.023.13006 | — |
| Xerox | AltaLink® C8130 / C8135 / C8145 / C8155 / C8170 | B8145 / B8155 / B8170 Common Criteria Certified (Aug 2023) | 111.xxx.003.11600 | — |
| Xerox | VersaLink® B625 / C625 | B425 / C425 Common Criteria Certified (2024) | 119.xxx.003.11705 | — |
| Xerox | WorkCentre 3655/3655i | 075.060.004.07810 | — |
| Xerox | WorkCentre 5945/55i | 075.091.004.07810 | — |
| Xerox | WorkCentre 6655/6655i | 075.110.004.07810 | — |
| Xerox | WorkCentre 7220/7225i | 075.030.004.07810 | — |
| Xerox | WorkCentre 7830/7835i | 075.010 004.07810 | — |
| Xerox | WorkCentre 7845/7855i | 075.040.004.07810 | — |
| Xerox | WorkCentre 7845/7855 (IBG) | 075.080.004.07810 | — |
| Xerox | WorkCentre 7970/7970i | 075.200.004.07810 | — |
| Xerox | WorkCentre EC7836 | 075.050.004.07810 | — |
| Xerox | WorkCentre EC7856 | 075.020.004.07810 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
0xQRx/CVE-2024-6333 ★ 0 · Feb 11, 2026
Authenticated Remote Code Execution vulnerability in Xerox WorkCentre printers via the Network Troubleshooting Log feature.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- WID-SEC-2024-3214 Xerox WorkCentre: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Oct 15, 2024