CVE-2023-46327: fujifilm business inovation corp. apeos 1860 japan model Improper Authentication
Vulnerability summary
CVE-2023-46327 is a medium (CVSS 5.9) Improper Authentication vulnerability in fujifilm business inovation corp. apeos 1860 japan model. EPSS estimates a 0.35% chance of exploitation in the next 30 days, higher than 27.5% of scored vulnerabilities.
Timeline
- 02-11-2023PublishedVulnerability first disclosed.
- 06-09-2024Last modifiedVulnerability information updated.
Description
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.35%
Chance of exploitation in the next 30 days
Percentile
28%
Versus all other CVEs
30-day change
0.00 pp
From 0.35% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Fujifilm business inovation corp.136 products
- apeos 1860 japan model1.0.0 to 1.2.16 | 1.20.0 to 1.20.7 | 1.26.0 to 1.26.10
- apeos 2560 asia pacific model1.0.0 to 1.2.16 | 1.20.0 to 1.26.10
- apeos 2560 gk asia pacific model1.0.0 to 1.2.16 | 1.20.0 to 1.26.10
- apeos 2560 japan model1.0.0 to 1.2.16 | 1.20.0 to 1.20.7 | 1.26.0 to 1.26.10
- apeos 3060 asia pacific model1.0.0 to 1.2.16 | 1.20.0 to 1.26.10
Fujifilm64 products
- apeos_2560_firmware≥ 1.0.0, ≤ 1.2.16 | ≥ 1.20.0, ≤ 1.26.10
- apeos_2560_gk_firmware≥ 1.0.0, ≤ 1.2.16 | ≥ 1.20.0, ≤ 1.26.10
- apeos_3060_firmware≥ 1.0.0, ≤ 1.2.16 | ≥ 1.20.0, ≤ 1.26.10
- apeos_3060_gk_firmware≥ 1.0.0, ≤ 1.2.16 | ≥ 1.20.0, ≤ 1.26.10
- apeos_3560_firmware≥ 1.0.0, ≤ 1.2.16 | ≥ 1.20.0, ≤ 1.26.10
2 vendors · 200 products · Showing 200 of 254. Use Open JSON for the complete list.
References
3 links- security.business.xerox.com/en-us/documents/bulletins/Vendor Advisory
- jvn.jp/en/vu/JVNVU96482726/index.htmlThird Party Advisory