CVE-2021-28672
9.8 · CRITICALOverview
CVE-2021-28672 is a critical-severity vulnerability affecting xerox phaser_6510_firmware. It was published on March 29, 2021 and has a CVSS 3.1 base score of 9.8 (CRITICAL).
This vulnerability has a CVSS 3.1 base score of 9.8, rated CRITICAL. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
Technical Description
Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (Bridge), B7025/30/35 before 58.65.51 and 58.59.11 (Bridge), C400 before 67.65.51 and 67.59.01 (Bridge), C405 before 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59.01 (Bridge), C7000 before 56.65.51 and 56.59.01 (Bridge), C7020/25/30 before 57.65.51 and 57.59.01 (Bridge), C8000/C9000 before 70.65.51 and 70.59.01 (Bridge), C8000W before 72.65.51 allows remote attackers to execute arbitrary code through a buffer overflow in Web page parameter handling.
Remediation
Check the references section for vendor advisories and patches from xerox. Update phaser_6510_firmware to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|---|---|---|
| xerox | phaser_6510_firmware | >= 0, < 64.59.11 | Affected |
| xerox | workcentre_6515_firmware | >= 0, < 65.59.11 | Affected |
| xerox | versalink_b400_firmware | >= 0, < 37.59.01 | Affected |
| xerox | versalink_b405_firmware | >= 0, < 38.59.01 | Affected |
| xerox | versalink_b600_firmware | >= 0, < 32.59.01 | Affected |
| xerox | versalink_b610_firmware | >= 0, < 32.59.01 | Affected |
| xerox | versalink_b605_firmware | >= 0, < 33.59.01 | Affected |
| xerox | versalink_b615_firmware | >= 0, < 33.59.01 | Affected |
| xerox | versalink_b7025_firmware | >= 0, < 58.59.11 | Affected |
| xerox | versalink_b7030_firmware | >= 0, < 58.59.11 | Affected |
Frequently Asked Questions
What is CVE-2021-28672?
CVE-2021-28672 is a critical-severity vulnerability affecting xerox phaser_6510_firmware. It was published on March 29, 2021 and has a CVSS 3.1 base score of 9.8 (CRITICAL).
How severe is CVE-2021-28672?
This vulnerability has a CVSS 3.1 base score of 9.8, rated CRITICAL. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2021-28672?
Check the references section for vendor advisories and patches from xerox. Update phaser_6510_firmware to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2021-28672?
CyberStrike's AI-powered security agents can automatically detect CVE-2021-28672 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related CRITICAL CVEs from 2021
View all →An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticat
An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticat
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A r
Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A r
DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness
DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in
An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Ev
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability th
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnera
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet als