Skip to content
Fencer Intel
critical 9.8

CVE-2021-28673 json

Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61…

published 5y ago modified 4mo ago also EUVD-2021-15336

cvss
9.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.9%
EPSS 1.9% chance of exploitation in 30 days, percentile 80%
public exploits
0
none known

Summary

Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before 38.61.23 and 38.59.01 (Bridge), B600/B610 before 32.61.23 and 32.59.01 (Bridge), B605/B615 before 33.61.23 and 33.59.01 (Bridge), B7025/30/35 before 58.61.23 and 58.59.11 (Bridge), C400 before 67.61.23 and 67.59.01 (Bridge), C405 before 68.61.23 and 68.59.01 (Bridge), C500/C600 before 61.61.23 and 61.59.01 (Bridge), C505/C605 before 62.61.23 and 62.59.11 (Bridge), C7000 before 56.61.23 and 56.59.01 (Bridge), C7020/25/30 before 57.61.23 and 57.59.01 (Bridge), C8000/C9000 before 70.61.23 and 70.59.01 (Bridge), allows remote attackers with "a weaponized clone file" to execute arbitrary commands in the Web User Interface.

Patch / fix

  • xerox phaser_6510_firmware 64.59.11, 64.61.23
  • xerox workcentre_6515_firmware 65.59.11, 65.61.23
  • xerox versalink_b400_firmware 37.59.01, 37.61.23
  • xerox versalink_b405_firmware 38.59.01, 38.61.23
  • xerox versalink_b600_firmware 32.59.01, 32.61.23
  • xerox versalink_b610_firmware 32.59.01, 32.61.23
  • xerox versalink_b605_firmware 33.59.01, 33.61.23
  • xerox versalink_b615_firmware 33.59.01, 33.61.23
  • xerox versalink_b7025_firmware 58.59.11, 58.61.23
  • xerox versalink_b7030_firmware 58.61.23
  • xerox versalink_b7035_firmware 58.59.11, 58.61.23
  • xerox versalink_c400_firmware 67.59.01, 67.61.23
  • xerox versalink_c405_firmware 68.59.01, 68.61.23
  • xerox versalink_c500_firmware 61.59.01, 61.61.23
  • xerox versalink_c600_firmware 61.59.01, 61.61.23
  • xerox versalink_c505_firmware 62.59.11, 62.61.23
  • xerox versalink_c605_firmware 62.59.11, 62.61.23
  • xerox versalink_c7000_firmware 56.59.01, 56.61.23
  • xerox versalink_c7020_firmware 57.59.01, 57.61.23
  • xerox versalink_c7025_firmware 57.59.01, 57.61.23

Is CVE-2021-28673 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

1.94% chance of exploitation in the next 30 days, higher than 80% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.