CVE-2021-28670

published 2021-03-29

CVE-2021-28670: Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before…

Priority P3 49 critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C N I H A H

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
xerox	altalink_b8045_firmware	< 103.008.020.23120	103.008.020.23120
xerox	altalink_b8055_firmware	< 103.008.020.23120	103.008.020.23120
xerox	altalink_b8065_firmware	< 103.008.020.23120	103.008.020.23120
xerox	altalink_b8075_firmware	< 103.008.020.23120	103.008.020.23120
xerox	altalink_b8090_firmware	< 103.008.020.23120	103.008.020.23120
xerox	altalink_c8030_firmware	< 103.001.020.23120	103.001.020.23120
xerox	altalink_c8035_firmware	< 103.001.020.23120	103.001.020.23120
xerox	altalink_c8045_firmware	< 103.002.020.23120	103.002.020.23120
xerox	altalink_c8055_firmware	< 103.002.020.23120	103.002.020.23120
xerox	altalink_c8070_firmware	< 103.003.020.23120	103.003.020.23120

CVSS provenance

nvd v3.1 9.1 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

nvd v2.0 6.4 MEDIUM AV:N/AC:L/Au:N/C:N/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.