Fujifilm vulnerabilities
8 vulnerabilities
Known vulnerabilities in Fujifilm products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 290 products.
Products
50 of 290- Apeos C30702 vulnerabilities
- Apeos C35702 vulnerabilities
- Apeos C45702 vulnerabilities
- Apeos C55702 vulnerabilities
- Apeos C65702 vulnerabilities
- Apeos C65802 vulnerabilities
- Apeos C70702 vulnerabilities
- Apeos C75802 vulnerabilities
- Apeos C81802 vulnerabilities
- Apeosport 25602 vulnerabilities
- Apeosport 2560 G2 vulnerabilities
- Apeosport 30602 vulnerabilities
- Apeosport 3060 G2 vulnerabilities
- Apeosport 35602 vulnerabilities
- Apeosport 3560 G2 vulnerabilities
- Apeosport 45702 vulnerabilities
- Apeosport 4570 G2 vulnerabilities
- Apeosport 55702 vulnerabilities
- Apeosport 5570 G2 vulnerabilities
- Apeosport C20602 vulnerabilities
- Apeosport C2060 G2 vulnerabilities
- Apeosport C25602 vulnerabilities
- Apeosport C2560 G2 vulnerabilities
- Apeosport C30602 vulnerabilities
- Apeosport C30702 vulnerabilities
- Apeosport C35702 vulnerabilities
- Apeosport C45702 vulnerabilities
- Apeosport C55702 vulnerabilities
- Apeosport C65702 vulnerabilities
- Apeosport C70702 vulnerabilities
- Apeosport Vii 40212 vulnerabilities
- Apeosport Vii 50212 vulnerabilities
- Apeosport Vii C22732 vulnerabilities
- Apeosport Vii C33212 vulnerabilities
- Apeosport Vii C33722 vulnerabilities
- Apeosport Vii C33732 vulnerabilities
- Apeosport Vii C44212 vulnerabilities
- Apeosport Vii C44732 vulnerabilities
- Apeosport Vii C55732 vulnerabilities
- Apeosport Vii C77732 vulnerabilities
- Apeospro C6502 vulnerabilities
- Apeospro C7502 vulnerabilities
- Apeospro C8102 vulnerabilities
- Cr Ir 357 Fcr Capsula X2 vulnerabilities
- Cr Ir 357 Fcr Carbon X2 vulnerabilities
- Cr Ir 357 Fcr Xc 22 vulnerabilities
- Docucentre Vii C22732 vulnerabilities
- Docucentre Vii C33722 vulnerabilities
- Docucentre Vii C33732 vulnerabilities
- Docucentre Vii C44732 vulnerabilities
CVE-2021-43774fujifilmapeosport-iv_2060_firmware+159
EPSS score0.69%
A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer (e.g., by using the default credentials) can download the address book file, which contains the list of users (domain users, FTP users, etc.) stored on the printer, together with their encrypted passwords. The passwords are protected by a weak cipher, such as ROT13, which requires minimal effort to instantly retrieve the original password, giving the attacker a list of valid domain or FTP usernames and passwords.CVE-2022-26320canonimageprograf_firmware+91EPSS score0.97%
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.CVE-2022-43460fujifilm business innovation corp.driver distributor+1EPSS score0.54%
Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator's credentials may be decrypted.CVE-2017-10850fuji xerox co.,ltd.installer of art ex direct fax driver for apeosport-vi c7771/c6671/c5571/c4471/c3371/c2271+11EPSS score0.98%
Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2019-10948fujifilmcr-ir_357_fcr_capsula_x_firmware+3EPSS score1.56%
Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted.CVE-2019-10950fujifilmcr-ir_357_fcr_capsula_x_firmware+3EPSS score3.63%
Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system.CVE-2023-29984brotherdcp-1610w_firmware+215EPSS score0.94%
Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor.CVE-2023-46327fujifilm business inovation corp.apeos 1860 japan model+253EPSS score0.35%
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].