CVE-2024-27974: fujifilm business inovation corp. apeosport-iv c2270 Cross-Site Request Forgery (CSRF)
Vulnerability summary
CVE-2024-27974 is a medium (CVSS 6.3) Cross-Site Request Forgery (CSRF) vulnerability in fujifilm business inovation corp. apeosport-iv c2270. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.4% of scored vulnerabilities.
Timeline
- 18-03-2024PublishedVulnerability first disclosed.
- 31-10-2024Last modifiedVulnerability information updated.
Description
Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc. may be altered. As for the details of affected product names, model numbers, and versions, refer to the information provided by the vendor listed under [References].
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.20% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Fujifilm business inovation corp.37 products
- apeosport-iv c2270All versions (No fix recorded)
- apeosport-iv c2270 rAll versions (No fix recorded)
- apeosport-iv c3370All versions (No fix recorded)
- apeosport-iv c3370 rAll versions (No fix recorded)
- apeosport-iv c4470All versions (No fix recorded)
1 vendor · 37 products