PT-2023-9607 · Xerox · Xerox Workcentre+2

Tamas Jos + 1 · Publicado 2023-12-14 · Atualizado 2024-11-23 · CVE-2024-6333

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xerox Altalink, Versalink, and WorkCentre products (affected versions not specified)

Description The issue is related to a lack of measures to neutralize special elements used in an operating system command, allowing an attacker to execute arbitrary code in the device's operating system with root privileges by injecting a specially crafted command. This can be exploited remotely. The vulnerability has been reportedly exploited in real-world attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

RCE

Command Injection

Enumeração de Fraquezas

CWE-78

CWE-20

CWE-77

Identificadores relacionados

BDU:2024-08747

CVE-2024-6333

Produtos afetados

Xerox Altalink

Xerox Versalink

Xerox Workcentre

Referências · 23

• https://twitter.com/transilienceai/status/1853226084713603361 · Publicação no Twitter
• https://twitter.com/transilienceai/status/1859099435147362463 · Publicação no Twitter
• https://twitter.com/cracbot/status/1848605368924144126 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2024-08747 · Nota de Segurança
• https://twitter.com/transilienceai/status/1856386549929390441 · Publicação no Twitter
• https://sec-consult.com/vulnerability-lab/advisory/authenticated-remote-code-execution-in-multiple-xerox-printers · Nota
• https://twitter.com/transilienceai/status/1856204858098852038 · Publicação no Twitter
• https://securitydocs.business.xerox.com/wp-content/uploads/2024/10/Xerox-Security-Bulletin-XRX24-015-for-Altalink-Versalink-and-WorkCentre-%E2%80%93-CVE-2024-6333-.pdf · Nota
• https://twitter.com/transilienceai/status/1858737182984343688 · Publicação no Twitter
• https://t.me/zerodayalert/364 · Publicação no Telegram
• https://twitter.com/transilienceai/status/1860187560938733770 · Publicação no Twitter
• https://twitter.com/transilienceai/status/1853945012826046575 · Publicação no Twitter
• https://twitter.com/transilienceai/status/1856929464636092814 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2024-6333 · Nota de Segurança
• https://twitter.com/transilienceai/status/1858561343579976066 · Publicação no Twitter