Published: 03/03/2022 Updated: 13/05/2022

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 4.9 | Impact Score: 3.6 | Exploitability Score: 1.2

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

A risky-algorithm issue exists on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer (e.g., by using the default credentials) can download the address book file, which contains the list of users (domain users, FTP users, etc.) stored on the printer, together with their encrypted passwords. The passwords are protected by a weak cipher, such as ROT13, which requires minimal effort to instantly retrieve the original password, giving the attacker a list of valid domain or FTP usernames and passwords.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fujifilm apeosport-iv_7080_firmware -
fujifilm apeosport-iv_6080_firmware -
fujifilm apeosport-iv_5080_firmware -
fujifilm apeosport-iv_3065_firmware
fujifilm apeosport-iv_3060_firmware
fujifilm apeosport-iv_2060_firmware
fujifilm apeosport-iv_5070_firmware
fujifilm apeosport-iv_4070_firmware
fujifilm apeosport-iv_3070_firmware
fujifilm apeosport-iv_c4430_firmware
fujifilm apeosport-iv_c5570_firmware -
fujifilm apeosport-iv_c4470_firmware -
fujifilm apeosport-iv_c3370_firmware -
fujifilm apeosport-iv_c2270_firmware -
fujifilm apeosport-iv_c5575_firmware -
fujifilm apeosport-iv_c4475_firmware -
fujifilm apeosport-iv_c3375_firmware -
fujifilm apeosport-iv_c2275_firmware -
fujifilm apeosport-iv_c7780_firmware -
fujifilm apeosport-iv_c6680_firmware -
fujifilm apeosport-iv_c5580_firmware -
fujifilm apeosport-v_4020_firmware
fujifilm apeosport-v_4070_firmware
fujifilm apeosport-v_5070_firmware
fujifilm apeosport-v_c3320_firmware
fujifilm apeosport-v_c5585_firmware
fujifilm apeosport-v_c6685_firmware
fujifilm apeosport-v_c7785_firmware
fujifilm apeosport-v_c7775_firmware
fujifilm apeosport-v_c6675_firmware
fujifilm apeosport-v_c5575_firmware
fujifilm apeosport-v_c4475_firmware
fujifilm apeosport-v_c3375_firmware
fujifilm apeosport-v_c2275_firmware
fujifilm apeosport-v_c7775_t2_firmware
fujifilm apeosport-v_c6675_t2_firmware
fujifilm apeosport-v_c5575_t2_firmware
fujifilm apeosport-v_c4475_t2_firmware
fujifilm apeosport-v_c3375_t2_firmware
fujifilm apeosport-v_c3373_t2_firmware
fujifilm apeosport-v_c2275_t2_firmware
fujifilm apeosport-v_c7776_firmware
fujifilm apeosport-v_c6676_firmware
fujifilm apeosport-v_c5576_firmware
fujifilm apeosport-v_c4476_firmware
fujifilm apeosport-v_c3376_firmware
fujifilm apeosport-v_c2276_firmware
fujifilm apeosport-v_c7780_firmware
fujifilm apeosport-v_c6680_firmware
fujifilm apeosport-v_c5580_firmware
fujifilm apeosport-v_c7780_t2_firmware
fujifilm apeosport-v_c6680_t2_firmware
fujifilm apeosport-v_c5580_t2_firmware
fujifilm apeosport-vi_c7771_firmware
fujifilm apeosport-vi_c6671_firmware
fujifilm apeosport-vi_c5571_firmware
fujifilm apeosport-vi_c4471_firmware
fujifilm apeosport-vi_c3371_firmware
fujifilm apeosport-vi_c3370_firmware
fujifilm apeosport-vi_c2271_firmware
fujifilm apeosport-vii_c7773_firmware
fujifilm apeosport-vii_c6673_firmware
fujifilm apeosport-vii_c5573_firmware
fujifilm apeosport-vii_c4473_firmware
fujifilm apeosport-vii_c3373_firmware
fujifilm apeosport-vii_c3372_firmware
fujifilm apeosport-vii_c2273_firmware
fujifilm docucentre-iv_3060_firmware
fujifilm docucentre-iv_2060_firmware
fujifilm docucentre-iv_5070_firmware
fujifilm docucentre-iv_4070_firmware
fujifilm docucentre-iv_7080_firmware -
fujifilm docucentre-iv_6080_firmware -
fujifilm docucentre-iv_5080_firmware -
fujifilm docucentre-iv_c2260_firmware -
fujifilm docucentre-iv_c2263_firmware
fujifilm docucentre-iv_c2265_firmware
fujifilm docucentre-iv_c4430_firmware
fujifilm docucentre-iv_c5570_firmware -
fujifilm docucentre-iv_c4470_firmware -
fujifilm docucentre-iv_c3370_firmware -
fujifilm docucentre-iv_c2270_firmware -
fujifilm docucentre-iv_c5575_firmware -
fujifilm docucentre-iv_c4475_firmware -
fujifilm docucentre-iv_c3375_firmware -
fujifilm docucentre-iv_c2275_firmware -
fujifilm docucentre-iv_c7780_firmware -
fujifilm docucentre-iv_c6680_firmware -
fujifilm docucentre-iv_c5580_firmware -
fujifilm docucentre-v_1060_firmware
fujifilm docucentre-v_2060_firmware
fujifilm docucentre-v_3060_firmware
fujifilm docucentre-v_4070_firmware
fujifilm docucentre-v_5070_firmware
fujifilm docucentre-v_7080_firmware
fujifilm docucentre-v_6080_firmware
fujifilm docucentre-v_5080_firmware
fujifilm docucentre-v_c2263_firmware
fujifilm docucentre-v_c2265_firmware
fujifilm docucentre-v_c5585_firmware
fujifilm docucentre-v_c6685_firmware
fujifilm docucentre-v_c7785_firmware
fujifilm docucentre-v_c7775_firmware
fujifilm docucentre-v_c6675_firmware
fujifilm docucentre-v_c5575_firmware
fujifilm docucentre-v_c4475_firmware
fujifilm docucentre-v_c3375_firmware
fujifilm docucentre-v_c2275_firmware
fujifilm docucentre-v_c7775_t2_firmware
fujifilm docucentre-v_c6675_t2_firmware
fujifilm docucentre-v_c5575_t2_firmware
fujifilm docucentre-v_c4475_t2_firmware
fujifilm docucentre-v_c3375_t2_firmware
fujifilm docucentre-v_c3373_t2_firmware
fujifilm docucentre-v_c2275_t2_firmware
fujifilm docucentre-v_c7776_firmware
fujifilm docucentre-v_c6676_firmware
fujifilm docucentre-v_c5576_firmware
fujifilm docucentre-v_c4476_firmware
fujifilm docucentre-v_c3376_firmware
fujifilm docucentre-v_c2276_firmware
fujifilm docucentre-v_c7780_firmware
fujifilm docucentre-v_c6680_firmware
fujifilm docucentre-v_c5580_firmware
fujifilm docucentre-v_c7780_t2_firmware
fujifilm docucentre-v_c6680_t2_firmware
fujifilm docucentre-v_c5580_t2_firmware
fujifilm docucentre-vi_c7771_firmware
fujifilm docucentre-vi_c6671_firmware
fujifilm docucentre-vi_c5571_firmware
fujifilm docucentre-vi_c4471_firmware
fujifilm docucentre-vi_c3371_firmware
fujifilm docucentre-vi_c3370_firmware
fujifilm docucentre-vi_c2271_firmware
fujifilm docucentre-vii_c7773_firmware
fujifilm docucentre-vii_c6673_firmware
fujifilm docucentre-vii_c5573_firmware
fujifilm docucentre-vii_c4473_firmware
fujifilm docucentre-vii_c3373_firmware
fujifilm docucentre-vii_c3372_firmware
fujifilm docucentre-vii_c2273_firmware
fujifilm docucolor_1450_ga_firmware
fujifilm docuprint_m465_ap_firmware
fujifilm docuprint_cm415_ap_firmware
fujifilm docuprint_cm505da_firmware
fujifilm fuji_xerox_color_c60_firmware
fujifilm fuji_xerox_color_c70_firmware
fujifilm fuji_xerox_color_c75_firmware
fujifilm fuji_xerox_d125_firmware
fujifilm fuji_xerox_d110_firmware
fujifilm fuji_xerox_d95_firmware
fujifilm fuji_xerox_d136_firmware
fujifilm fuji_xerox_b9100_firmware
fujifilm fuji_xerox_b9110_firmware
fujifilm fuji_xerox_b9125_firmware
fujifilm fuji_xerox_b9136_firmware
fujifilm versant_170i_firmware
fujifilm versant_180i_firmware
fujifilm versant_80_firmware
fujifilm versant_180_firmware

CWE-327 https://www.foregenix.com/blog https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_addressbook_announce.html https://www.foregenix.com/blogs-new-2021/dude-its-just-a-printer https://nvd.nist.gov

Get Started

CVE-2021-43774

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect