7.2
CVE-2024-6333
- EPSS 3.67%
- Veröffentlicht 17.10.2024 14:15:14
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle 10b61619-3869-496c-8a1e-f291b0
- CVE-Watchlists
- Unerledigt
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Herstellerxerox
≫
Produkt
altalink_firmware
Default Statusunknown
Version
0
Version <
103.xxx.024.18600
Status
affected
Version
0
Version <
119.xxx.023.13006
Status
affected
Version
0
Version <
111.xxx.003.11600
Status
affected
Herstellerxerox
≫
Produkt
versalink_firmware
Default Statusunknown
Version
0
Version <
119.xxx.003.11705
Status
affected
Herstellerxerox
≫
Produkt
workcentre_firmware
Default Statusunknown
Version
0
Version <
075.060.004.07810
Status
affected
Version
0
Version <
075.091.004.07810
Status
affected
Version
0
Version <
075.110.004.07810
Status
affected
Version
0
Version <
075.030.004.07810
Status
affected
Version
0
Version <
075.010 004.07810
Status
affected
Version
0
Version <
075.040.004.07810
Status
affected
Version
0
Version <
075.080.004.07810
Status
affected
Version
0
Version <
075.200.004.07810
Status
affected
Version
0
Version <
075.050.004.07810
Status
affected
Version
0
Version <
075.020.004.07810
Status
affected
Herstellerxerox
≫
Produkt
xerox_firmware
Default Statusunknown
Version
0
Version <
103.xxx.024.18600
Status
affected
Version
0
Version <
103.023.031.35105
Status
affected
Version
0
Version <
103.xxx.013.14115
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.67% | 0.877 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 10b61619-3869-496c-8a1e-f291b0e71e3f | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.