CVE-2022-26320

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
VendorProductVersion
rambussafezone_basic_crypto_module
9.3.0 ≤
𝑥
< 10.4.0
fujifilmapeos_c7070_firmware
𝑥
< 1.1.7
fujifilmapeos_c6570_firmware
𝑥
< 1.1.7
fujifilmapeos_c5570_firmware
𝑥
< 1.1.7
fujifilmapeos_c4570_firmware
𝑥
< 1.1.7
fujifilmapeos_c3570_firmware
𝑥
< 1.1.7
fujifilmapeos_c3070_firmware
𝑥
< 1.1.7
fujifilmapeos_c7070_g_firmware
𝑥
< 1.1.7
fujifilmapeos_c6570_g_firmware
𝑥
< 1.1.7
fujifilmapeos_c5570_g_firmware
𝑥
< 1.1.7
fujifilmapeos_c4570_g_firmware
𝑥
< 1.1.7
fujifilmapeos_c3570_g_firmware
𝑥
< 1.1.7
fujifilmapeos_c3070_g_firmware
𝑥
< 1.1.7
fujifilmapeos_c328_df_firmware
𝑥
< 202112062053
fujifilmapeos_c328_dw_firmware
𝑥
< 202112062053
fujifilmapeos_c325_dw_firmware
𝑥
< 202112062053
fujifilmapeos_c325_z_firmware
𝑥
< 202112062053
fujifilmapeos_c8180_firmware
𝑥
< 1.1.6
fujifilmapeos_c7580_firmware
𝑥
< 1.1.6
fujifilmapeos_c6580_firmware
𝑥
< 1.1.6
fujifilmapeosport_3560_firmware
𝑥
< 1.60.9
fujifilmapeosport_3060_firmware
𝑥
< 1.60.9
fujifilmapeosport_2560_firmware
𝑥
< 1.60.9
fujifilmapeosport_3560_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_3060_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_2560_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_4570_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_5570_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_4570_firmware
𝑥
< 1.60.9
fujifilmapeosport_5570_firmware
𝑥
< 1.60.9
fujifilmapeosport_c3060_firmware
𝑥
< 1.60.9
fujifilmapeosport_c2560_firmware
𝑥
< 1.60.9
fujifilmapeosport_c2060_firmware
𝑥
< 1.60.9
fujifilmapeosport_c3060_firmware
𝑥
< 1.60.9
fujifilmapeosport_c2560_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_c2060_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_c7070_firmware
𝑥
< 1.60.9
fujifilmapeosport_c4570_firmware
𝑥
< 1.60.9
fujifilmapeosport_c3570_firmware
𝑥
< 1.60.9
fujifilmapeosport_c3070_firmware
𝑥
< 1.60.9
fujifilmapeosport_c6570_firmware
𝑥
< 1.60.9
fujifilmapeosport_c5570_firmware
𝑥
< 1.60.9
fujifilmapeosport_c7070_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_c4570_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_c3570_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_c3070_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_c6570_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_c5570_g_firmware
𝑥
< 1.60.9
fujifilmapeosport_print_c5570_firmware
𝑥
< 1.60.9
fujifilmapeosport-vii_5021_firmware
𝑥
< 1.60.9
fujifilmapeosport-vii_p4021_firmware
𝑥
< 1.60.9
fujifilmapeosport-vii_4021_firmware
𝑥
< 1.60.9
fujifilmapeosport-vii_cp4421_firmware
𝑥
< 1.60.9
fujifilmapeosport-vii_c4421_firmware
𝑥
< 1.60.9
fujifilmapeosport-vii_c3321_firmware
𝑥
< 1.60.9
fujifilmapeosport-vii_c7773_firmware
𝑥
< 1.60.2
fujifilmapeosport-vii_c6773_firmware
𝑥
< 1.60.2
fujifilmapeosport-vii_c5573_firmware
𝑥
< 1.60.2
fujifilmapeosport-vii_c4473_firmware
𝑥
< 1.60.2
fujifilmapeosport-vii_c3373_firmware
𝑥
< 1.60.2
fujifilmapeosport-vii_c3372_firmware
𝑥
< 1.60.2
fujifilmapeosport-vii_c2273_firmware
𝑥
< 1.60.2
fujifilmapeosport-vii_c7788_firmware
𝑥
< 1.60.1
fujifilmapeosport-vii_c6688_firmware
𝑥
< 1.60.1
fujifilmapeosport-vii_c5588_firmware
𝑥
< 1.60.1
fujifilmapeospro_c810_firmware
𝑥
< 1.1.6
fujifilmapeospro_c750_firmware
𝑥
< 1.1.6
fujifilmapeospro_c650_firmware
𝑥
< 1.1.6
fujifilmapeosprint_c328_firmware
𝑥
< 202112062117
fujifilmapeosprint_c328_dw_firmware
𝑥
< 202112062117
fujifilmapeosprint_c325_dw_firmware
𝑥
< 202112062117
fujifilmdocucentre-vii_c7773_firmware
𝑥
< 1.60.2
fujifilmdocucentre-vii_c6673_firmware
𝑥
< 1.60.2
fujifilmdocucentre-vii_c5573_firmware
𝑥
< 1.60.2
fujifilmdocucentre-vii_c4473_firmware
𝑥
< 1.60.2
fujifilmdocucentre-vii_c3373_firmware
𝑥
< 1.60.2
fujifilmdocucentre-vii_c3372_firmware
𝑥
< 1.60.2
fujifilmdocucentre-vii_c2273_firmware
𝑥
< 1.60.2
fujifilmdocucentre-vii_c7788_firmware
𝑥
< 1.60.1
fujifilmdocucentre-vii_c6688_firmware
𝑥
< 1.60.1
fujifilmdocucentre-vii_c5588_firmware
𝑥
< 1.60.1
fujifilmdocuprint_4405_d_firmware
𝑥
< 1.57.5
fujifilmdocuprint_4408_d_firmware
𝑥
< 1.57.5
fujifilmdocuprint_3505_d_firmware
𝑥
< 1.57.5
fujifilmdocuprint_3508_d_firmware
𝑥
< 1.57.5
fujifilmdocuprint_3205_d_firmware
𝑥
< 1.57.5
fujifilmdocuprint_3208_d_firmware
𝑥
< 1.57.5
fujifilmdocuprint_c3555_d_firmware
𝑥
< 1.57.6
fujifilmdocuprint_c2555_d_firmware
𝑥
< 1.57.6
fujifilmprimelink_c9070_firmware
𝑥
< 1.145.1
fujifilmprimelink_c9065_firmware
𝑥
< 1.145.1
canonimagerunner_firmware
𝑥
≤ 2020-03-14
canonimageprograf_firmware
𝑥
< 2020-03-14
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://fermatattack.secvuln.info
https://global.canon/en/support/security/index.html
https://web.archive.org/web/20220922042721/https://safezoneswupdate.com/
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.html
https://www.rambus.com/security/response-center/advisories/rmbs-2021-01/
https://fermatattack.secvuln.info
https://global.canon/en/support/security/index.html
https://safezoneswupdate.com
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.html