CVE-2023-46327

02.11.2023, 03:15

Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
jpcert	CNA	---				---
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 38%

Vendor	Product	Version
xerox	primelink_c9065_firmware	𝑥 < 85.40.31
xerox	primelink_c9070_firmware	𝑥 < 85.40.31
xerox	primelink_b9136_firmware	𝑥 < 90.40.91
xerox	primelink_b9125_firmware	𝑥 < 90.40.91
xerox	primelink_b9110_firmware	𝑥 < 90.40.91
xerox	primelink_b9100_firmware	𝑥 < 90.40.91
xerox	versalink_c405_firmware	𝑥 < 68.81.41
xerox	versalink_c505_firmware	𝑥 < 68.81.41
xerox	versalink_c605_firmware	𝑥 < 68.81.41
xerox	versalink_c7000_firmware	𝑥 < 56.74.51
xerox	versalink_c7020_firmware	𝑥 < 57.74.51
xerox	versalink_c7025_firmware	𝑥 < 57.74.51
xerox	versalink_c7030_firmware	𝑥 < 57.74.51
xerox	versalink_c7130_firmware	𝑥 < 69.23.41
xerox	versalink_c7125_firmware	𝑥 < 69.23.41
xerox	versalink_c7120_firmware	𝑥 < 69.23.41
xerox	versalink_b405_firmware	𝑥 < 38.81.41
xerox	versalink_b605_firmware	𝑥 < 38.81.41
xerox	versalink_b615_firmware	𝑥 < 38.81.41
xerox	versalink_b7125_firmware	𝑥 < 59.23.41
xerox	versalink_b7130_firmware	𝑥 < 59.23.41
xerox	versalink_b7135_firmware	𝑥 < 59.23.41
xerox	workcentre_6515_firmware	𝑥 < 65.74.51
fujifilm	apeos_3560_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.16
fujifilm	apeos_3560_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_3060_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.16
fujifilm	apeos_3060_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_2560_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.16
fujifilm	apeos_2560_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_3560_gk_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.16
fujifilm	apeos_3560_gk_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_3060_gk_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.16
fujifilm	apeos_3060_gk_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_2560_gk_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.16
fujifilm	apeos_2560_gk_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_5330_firmware	𝑥 < 1.20.9
fujifilm	apeos_4830_firmware	𝑥 < 1.20.9
fujifilm	apeos_5570_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.6
fujifilm	apeos_5570_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.9
fujifilm	apeos_4570_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.6
fujifilm	apeos_4570_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.9
fujifilm	apeos_6340_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.11
fujifilm	apeos_6340_firmware	1.20.0 ≤ 𝑥 ≤ 1.20.6
fujifilm	apeos_7580_firmware	𝑥 < 1.26.9
fujifilm	apeos_6580_firmware	𝑥 < 1.26.9
fujifilm	apeos_c2570_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c2570_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	apeos_c3070_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c3070_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	apeos_c3570_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c3570_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	apeos_c4570_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c4570_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	apeos_c5570_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c5570_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	apeos_c6570_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c6570_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	apeos_c7070_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c7070_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	apeos_c3060_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.14
fujifilm	apeos_c3060_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_c2060_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.14
fujifilm	apeos_c2060_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_c2560_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.14
fujifilm	apeos_c2560_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_c3060_gk_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.14
fujifilm	apeos_c3060_gk_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_c2560_gk_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.14
fujifilm	apeos_c2560_gk_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_c2060_gk_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.14
fujifilm	apeos_c2060_gk_firmware	1.20.0 ≤ 𝑥 ≤ 1.26.10
fujifilm	apeos_c4030_firmware	𝑥 < 1.20.10
fujifilm	apeos_c3530_firmware	𝑥 < 1.20.10
fujifilm	apeos_c5240_firmware	1.0.0 ≤ 𝑥 ≤ 1.2.12
fujifilm	apeos_c5240_firmware	1.20.0 ≤ 𝑥 ≤ 1.20.6
fujifilm	apeos_c8180_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c8180_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.12
fujifilm	apeos_c7580_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c7580_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.12
fujifilm	apeos_c6580_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.7
fujifilm	apeos_c6580_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.12
fujifilm	apeosport_c3060_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.15
fujifilm	apeosport_c2560_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.15
fujifilm	apeosport_c2060_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.15
fujifilm	apeosport_c3060_g_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.15
fujifilm	apeosport_c2560_g_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.15
fujifilm	apeosport_c2060_g_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.15
fujifilm	apeosport_3560_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.16
fujifilm	apeosport_3060_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.16
fujifilm	apeosport_2560_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.16
fujifilm	apeosport_3560_g_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.16
fujifilm	apeosport_3060_g_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.16
fujifilm	apeosport_2560_g_firmware	1.0.0 ≤ 𝑥 ≤ 1.60.16
fujifilm	apeosport_5570_firmware	𝑥 ≤ 1.60.16
fujifilm	apeosport_4570_firmware	𝑥 ≤ 1.60.16
fujifilm	apeosport_3570_firmware	𝑥 ≤ 1.60.16
fujifilm	apeosport_5570_g_firmware	𝑥 ≤ 1.60.16
fujifilm	apeosport_4570_g_firmware	𝑥 ≤ 1.60.16
fujifilm	apeosport_c7070_firmware	𝑥 ≤ 1.60.18
fujifilm	apeosport_c6570_firmware	𝑥 ≤ 1.60.18
fujifilm	apeosport_c5570_firmware	𝑥 ≤ 1.60.18
fujifilm	apeosport_c4570_firmware	𝑥 ≤ 1.60.18
fujifilm	apeosport_c3570_firmware	𝑥 ≤ 1.60.18
fujifilm	apeosport_c3070_firmware	𝑥 ≤ 1.60.18
fujifilm	apeosport-vii_5021_firmware	1.0.0 ≤ 𝑥 < 1.60.3
fujifilm	apeosport-vii_5021_firmware	1.60.3 < 𝑥 < 1.60.16
fujifilm	apeosport-vii_4021_firmware	1.0.0 ≤ 𝑥 < 1.60.3
fujifilm	apeosport-vii_4021_firmware	1.60.3 < 𝑥 < 1.60.16
fujifilm	apeosport-vii_c4421_firmware	1.0.0 ≤ 𝑥 < 1.60.3
fujifilm	apeosport-vii_c4421_firmware	1.60.3 < 𝑥 < 1.60.16
fujifilm	apeosport-vii_c3321_firmware	1.0.0 ≤ 𝑥 < 1.60.3
fujifilm	apeosport-vii_c3321_firmware	1.60.3 < 𝑥 < 1.60.16
fujifilm	apeospro_c810_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.6
fujifilm	apeospro_c810_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.14
fujifilm	apeospro_c750_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.6
fujifilm	apeospro_c750_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.14
fujifilm	apeospro_c650_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.6
fujifilm	apeospro_c650_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.14
fujifilm	primelink_c9070_firmware	𝑥 < 1.145.4
fujifilm	primelink_c9065_firmware	𝑥 < 1.145.4
fujifilm	revoria_press_e1136_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.5
fujifilm	revoria_press_e1136_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	revoria_press_e1125_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.5
fujifilm	revoria_press_e1125_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	revoria_press_e1110_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.5
fujifilm	revoria_press_e1110_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	revoria_press_e1100_firmware	1.0.0 ≤ 𝑥 ≤ 1.3.5
fujifilm	revoria_press_e1100_firmware	1.21.0 ≤ 𝑥 ≤ 1.26.11
fujifilm	revoria_press_sc180_firmware	𝑥 < 1.22.8
fujifilm	revoria_press_sc170_firmware	𝑥 < 1.22.8

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-287 - Improper Authentication
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.

References

https://jvn.jp/en/vu/JVNVU96482726/index.html

https://security.business.xerox.com/en-us/documents/bulletins/

https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/1031_addressbook_announce.html

https://jvn.jp/en/vu/JVNVU96482726/index.html

https://security.business.xerox.com/en-us/documents/bulletins/

https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/1031_addressbook_announce.html