CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer (e.g., by using the default credentials) can download the address book file, which contains the list of users (domain users, FTP users, etc.) stored on the printer, together with their encrypted passwords. The passwords are protected by a weak cipher, such as ROT13, which requires minimal effort to instantly retrieve the original password, giving the attacker a list of valid domain or FTP usernames and passwords.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
VendorProductVersion
fujifilmapeosport-iv_7080_firmware
-
fujifilmapeosport-iv_6080_firmware
-
fujifilmapeosport-iv_5080_firmware
-
fujifilmapeosport-iv_3065_firmware
𝑥
< 1.160.5
fujifilmapeosport-iv_3060_firmware
𝑥
< 1.160.5
fujifilmapeosport-iv_2060_firmware
𝑥
< 1.160.5
fujifilmapeosport-iv_5070_firmware
𝑥
< 1.140.5
fujifilmapeosport-iv_4070_firmware
𝑥
< 1.140.5
fujifilmapeosport-iv_3070_firmware
𝑥
< 1.140.5
fujifilmapeosport-iv_c4430_firmware
𝑥
< 1.772.4
fujifilmapeosport-iv_c5570_firmware
-
fujifilmapeosport-iv_c4470_firmware
-
fujifilmapeosport-iv_c3370_firmware
-
fujifilmapeosport-iv_c2270_firmware
-
fujifilmapeosport-iv_c5575_firmware
-
fujifilmapeosport-iv_c4475_firmware
-
fujifilmapeosport-iv_c3375_firmware
-
fujifilmapeosport-iv_c2275_firmware
-
fujifilmapeosport-iv_c7780_firmware
-
fujifilmapeosport-iv_c6680_firmware
-
fujifilmapeosport-iv_c5580_firmware
-
fujifilmapeosport-v_4020_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_4070_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_5070_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c3320_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c5585_firmware
𝑥
< 1.60.0
fujifilmapeosport-v_c6685_firmware
𝑥
< 1.60.0
fujifilmapeosport-v_c7785_firmware
𝑥
< 1.60.0
fujifilmapeosport-v_c7775_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c6675_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c5575_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c4475_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c3375_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c2275_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c7775_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-v_c6675_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-v_c5575_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-v_c4475_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-v_c3375_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-v_c3373_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-v_c2275_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-v_c7776_firmware
𝑥
< 1.60.0
fujifilmapeosport-v_c6676_firmware
𝑥
< 1.60.0
fujifilmapeosport-v_c5576_firmware
𝑥
< 1.60.0
fujifilmapeosport-v_c4476_firmware
𝑥
< 1.60.0
fujifilmapeosport-v_c3376_firmware
𝑥
< 1.60.0
fujifilmapeosport-v_c2276_firmware
𝑥
< 1.60.0
fujifilmapeosport-v_c7780_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c6680_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c5580_firmware
𝑥
< 1.57.2
fujifilmapeosport-v_c7780_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-v_c6680_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-v_c5580_t2_firmware
𝑥
< 2.60.0
fujifilmapeosport-vi_c7771_firmware
𝑥
< 1.60.4
fujifilmapeosport-vi_c6671_firmware
𝑥
< 1.60.4
fujifilmapeosport-vi_c5571_firmware
𝑥
< 1.60.4
fujifilmapeosport-vi_c4471_firmware
𝑥
< 1.60.4
fujifilmapeosport-vi_c3371_firmware
𝑥
< 1.60.4
fujifilmapeosport-vi_c3370_firmware
𝑥
< 1.60.4
fujifilmapeosport-vi_c2271_firmware
𝑥
< 1.60.4
fujifilmapeosport-vii_c7773_firmware
𝑥
< 1.60.5
fujifilmapeosport-vii_c6673_firmware
𝑥
< 1.60.5
fujifilmapeosport-vii_c5573_firmware
𝑥
< 1.60.5
fujifilmapeosport-vii_c4473_firmware
𝑥
< 1.60.5
fujifilmapeosport-vii_c3373_firmware
𝑥
< 1.60.5
fujifilmapeosport-vii_c3372_firmware
𝑥
< 1.60.5
fujifilmapeosport-vii_c2273_firmware
𝑥
< 1.60.5
fujifilmdocucentre-iv_3060_firmware
𝑥
< 1.140.5
fujifilmdocucentre-iv_2060_firmware
𝑥
< 1.140.5
fujifilmdocucentre-iv_5070_firmware
𝑥
< 1.140.5
fujifilmdocucentre-iv_4070_firmware
𝑥
< 1.140.5
fujifilmdocucentre-iv_7080_firmware
-
fujifilmdocucentre-iv_6080_firmware
-
fujifilmdocucentre-iv_5080_firmware
-
fujifilmdocucentre-iv_c2260_firmware
-
fujifilmdocucentre-iv_c2263_firmware
𝑥
< 1.57.2
fujifilmdocucentre-iv_c2265_firmware
𝑥
< 1.57.2
fujifilmdocucentre-iv_c4430_firmware
𝑥
< 1.772.4
fujifilmdocucentre-iv_c5570_firmware
-
fujifilmdocucentre-iv_c4470_firmware
-
fujifilmdocucentre-iv_c3370_firmware
-
fujifilmdocucentre-iv_c2270_firmware
-
fujifilmdocucentre-iv_c5575_firmware
-
fujifilmdocucentre-iv_c4475_firmware
-
fujifilmdocucentre-iv_c3375_firmware
-
fujifilmdocucentre-iv_c2275_firmware
-
fujifilmdocucentre-iv_c7780_firmware
-
fujifilmdocucentre-iv_c6680_firmware
-
fujifilmdocucentre-iv_c5580_firmware
-
fujifilmdocucentre-v_1060_firmware
𝑥
< 1.57.1
fujifilmdocucentre-v_2060_firmware
𝑥
< 1.57.1
fujifilmdocucentre-v_3060_firmware
𝑥
< 1.57.1
fujifilmdocucentre-v_4070_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_5070_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_7080_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_6080_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_5080_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c2263_firmware
𝑥
< 1.57.1
fujifilmdocucentre-v_c2265_firmware
𝑥
< 1.57.1
fujifilmdocucentre-v_c5585_firmware
𝑥
< 1.60.0
fujifilmdocucentre-v_c6685_firmware
𝑥
< 1.60.0
fujifilmdocucentre-v_c7785_firmware
𝑥
< 1.60.0
fujifilmdocucentre-v_c7775_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c6675_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c5575_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c4475_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c3375_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c2275_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c7775_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-v_c6675_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-v_c5575_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-v_c4475_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-v_c3375_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-v_c3373_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-v_c2275_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-v_c7776_firmware
𝑥
< 1.60.0
fujifilmdocucentre-v_c6676_firmware
𝑥
< 1.60.0
fujifilmdocucentre-v_c5576_firmware
𝑥
< 1.60.0
fujifilmdocucentre-v_c4476_firmware
𝑥
< 1.60.0
fujifilmdocucentre-v_c3376_firmware
𝑥
< 1.60.0
fujifilmdocucentre-v_c2276_firmware
𝑥
< 1.60.0
fujifilmdocucentre-v_c7780_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c6680_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c5580_firmware
𝑥
< 1.57.2
fujifilmdocucentre-v_c7780_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-v_c6680_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-v_c5580_t2_firmware
𝑥
< 2.60.0
fujifilmdocucentre-vi_c7771_firmware
𝑥
< 1.60.4
fujifilmdocucentre-vi_c6671_firmware
𝑥
< 1.60.4
fujifilmdocucentre-vi_c5571_firmware
𝑥
< 1.60.4
fujifilmdocucentre-vi_c4471_firmware
𝑥
< 1.60.4
fujifilmdocucentre-vi_c3371_firmware
𝑥
< 1.60.4
fujifilmdocucentre-vi_c3370_firmware
𝑥
< 1.60.4
fujifilmdocucentre-vi_c2271_firmware
𝑥
< 1.60.4
fujifilmdocucentre-vii_c7773_firmware
𝑥
< 1.60.5
fujifilmdocucentre-vii_c6673_firmware
𝑥
< 1.60.5
fujifilmdocucentre-vii_c5573_firmware
𝑥
< 1.60.5
fujifilmdocucentre-vii_c4473_firmware
𝑥
< 1.60.5
fujifilmdocucentre-vii_c3373_firmware
𝑥
< 1.60.5
fujifilmdocucentre-vii_c3372_firmware
𝑥
< 1.60.5
fujifilmdocucentre-vii_c2273_firmware
𝑥
< 1.60.5
fujifilmdocucolor_1450_ga_firmware
𝑥
< 1.57.5
fujifilmdocuprint_m465_ap_firmware
𝑥
< 1.57.2
fujifilmdocuprint_cm415_ap_firmware
𝑥
< 1.57.2
fujifilmdocuprint_cm505da_firmware
𝑥
< 1.772.4
fujifilmfuji_xerox_color_c60_firmware
𝑥
< 1.142.2
fujifilmfuji_xerox_color_c70_firmware
𝑥
< 1.142.2
fujifilmfuji_xerox_color_c75_firmware
𝑥
< 1.57.1
fujifilmfuji_xerox_d125_firmware
𝑥
< 1.145.4
fujifilmfuji_xerox_d110_firmware
𝑥
< 1.145.4
fujifilmfuji_xerox_d95_firmware
𝑥
< 1.145.4
fujifilmfuji_xerox_d136_firmware
𝑥
< 1.57.1
fujifilmfuji_xerox_b9100_firmware
𝑥
< 1.60.1
fujifilmfuji_xerox_b9110_firmware
𝑥
< 1.60.1
fujifilmfuji_xerox_b9125_firmware
𝑥
< 1.60.1
fujifilmfuji_xerox_b9136_firmware
𝑥
< 1.60.1
fujifilmversant_170i_firmware
𝑥
< 1.57.3
fujifilmversant_180i_firmware
𝑥
< 1.57.3
fujifilmversant_80_firmware
𝑥
< 1.57.1
fujifilmversant_180_firmware
𝑥
< 1.57.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.foregenix.com/blog
https://www.foregenix.com/blogs-new-2021/dude-its-just-a-printer
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_addressbook_announce.html
https://www.foregenix.com/blog
https://www.foregenix.com/blogs-new-2021/dude-its-just-a-printer
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_addressbook_announce.html