Versalink Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:xerox:versalink_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorXerox (d8e9b125-9300-56db-a245-db4fdb1eff41)
ProductVersalink Firmware (be4862a2-4f43-50cd-a8a4-8edd2ed9ed02)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6333 vulnerable 2026-06-08 06:58:18.608240 Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products
HIGH (7.2)
Authenticated Remote Code Execution in Altalink, Versalink & WorkCentre Products.
Published: 2024-10-17T13:51:16.011Z
Updated: 2025-09-17T16:52:52.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23968 vulnerable 2026-06-08 05:40:59.426095 Details available
Xerox VersaLink devices on specific versions of firmware before 2022-01-26 allow remote attackers to brick the device via a crafted TIFF file in an unauthenticated HTTP POST request. There is a permanent denial of service because image parsing causes a reboot, but image parsing is restarted as soon as the boot process finishes. However, this boot loop can be resolved by a field technician. The TIFF file must have an incomplete Image Directory. Affected firmware versions include xx.42.01 and xx.50.61. NOTE: the 2022-01-24 NeoSmart article included "believed to affect all previous and later versions as of the date of this posting" but a 2022-01-26 vendor statement reports "the latest versions of firmware are not vulnerable to this issue."
Published: 2022-01-26T05:01:51.000Z
Updated: 2024-08-03T03:59:23.128Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.