Log in Start free

Vulnerability · Published Nov 2, 2023 · Assigned by jpcert

CVE-2023-46327

Medium 5.9

In plain English

A medium-severity security flaw in Apeos 1860 Japan Model from FUJIFILM Business Inovation Corp.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).

Severity (CVSS NVD)5.9Medium
Exploit odds (30 days)0.4%top 62.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Affected products (as reported)

VendorProductVersions
FUJIFILM Business Inovation Corp. Apeos C3070 Asia Pacific Model 1.0.0 to 1.3.7 1.21.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C3570 Asia Pacific Model 1.0.0 to 1.3.7 1.21.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C4570 Asia Pacific Model 1.0.0 to 1.3.7 1.21.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C2060 Japan Model 1.0.0 to 1.2.14 1.20.0 to 1.20.7 1.26.0 to 1.26.10
FUJIFILM Business Inovation Corp. Apeos C2360 Japan Model 1.0.0 to 1.2.14 1.20.0 to 1.20.7 1.26.0 to 1.26.10
FUJIFILM Business Inovation Corp. Apeos C2570 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.8 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C3070 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.8 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C3570 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.8 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C4570 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.8 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C5570 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.8 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C6570 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.8 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C7070 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.8 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp. Apeos C6580 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.6 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp. Apeos C7580 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.6 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp. Apeos C8180 Japan Model 1.0.0 to 1.3.7 1.21.0 to 1.21.6 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp. Apeos C3530 Japan Model 1.0.0 to 1.20.9
FUJIFILM Business Inovation Corp. Apeos C4030 Japan Model 1.0.0 to 1.20.9
FUJIFILM Business Inovation Corp. Apeos C5240 Japan Model 1.0.0 to 1.2.12 1.20.0 to 1.20.5
FUJIFILM Business Inovation Corp. ApeosPro C650 Japan Model 1.0.0 to 1.3.6 1.21.0 to 1.21.6 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp. ApeosPro C750 Japan Model 1.0.0 to 1.3.6 1.21.0 to 1.21.6 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp. ApeosPro C810 Japan Model 1.0.0 to 1.3.6 1.21.0 to 1.21.6 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp. RevoriaPress SC170 Japan Model 1.0.0 to 1.22.7
FUJIFILM Business Inovation Corp. RevoriaPress SC180 Japan Model 1.0.0 to 1.22.7
FUJIFILM Business Inovation Corp. ApeosPort C2060 Japan Model 1.0.0 to 1.60.15
FUJIFILM Business Inovation Corp. ApeosPort C2360 Japan Model 1.0.0 to 1.60.15
FUJIFILM Business Inovation Corp. ApeosPort C2570 Japan Model 1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp. ApeosPort C3070 Japan Model 1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp. ApeosPort C3570 Japan Model 1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp. ApeosPort C4570 Japan Model 1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp. ApeosPort C5570 Japan Model 1.0.0 to 1.60.17

References