Vulnerability · Published Feb 18, 2025 · Assigned by jpcert
CVE-2024-45320
Medium 6.5
In plain English
A medium-severity out-of-bounds write in DocuPrint CM225fw from FUJIFILM Business Innovation Corp.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.0)6.5Medium
Exploit odds (30 days)0.2%top 84.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FUJIFILM Business Innovation Corp. | DocuPrint CP225w | 01.22.01 and earlier |
| FUJIFILM Business Innovation Corp. | DocuPrint CP228w | 01.22.01 and earlier |
| FUJIFILM Business Innovation Corp. | DocuPrint CM225fw | 01.10.01 and earlier |
| FUJIFILM Business Innovation Corp. | DocuPrint CM228fw | 01.10.01 and earlier |
Weakness: CWE-787 · Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H