Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
9.1
CVSSv3

CVE-2022-26320

Published: 14/03/2022 Updated: 23/03/2022
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

The Rambus SafeZone Basic Crypto Module prior to 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices prior to 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

rambus safezone basic crypto module

fujifilm apeos c7070 firmware

fujifilm apeos c6570 firmware

fujifilm apeos c5570 firmware

fujifilm apeos c4570 firmware

fujifilm apeos c3570 firmware

fujifilm apeos c3070 firmware

fujifilm apeos c7070 g firmware

fujifilm apeos c6570 g firmware

fujifilm apeos c5570 g firmware

fujifilm apeos c4570 g firmware

fujifilm apeos c3570 g firmware

fujifilm apeos c3070 g firmware

fujifilm apeos c328 df firmware

fujifilm apeos c328 dw firmware

fujifilm apeos c325 dw firmware

fujifilm apeos c325 z firmware

fujifilm apeos c8180 firmware

fujifilm apeos c7580 firmware

fujifilm apeos c6580 firmware

fujifilm apeosport 3560 firmware

fujifilm apeosport 3060 firmware

fujifilm apeosport 2560 firmware

fujifilm apeosport 3560 g firmware

fujifilm apeosport 3060 g firmware

fujifilm apeosport 2560 g firmware

fujifilm apeosport 4570 g firmware

fujifilm apeosport 5570 g firmware

fujifilm apeosport 4570 firmware

fujifilm apeosport 5570 firmware

fujifilm apeosport c3060 firmware

fujifilm apeosport c2560 firmware

fujifilm apeosport c2060 firmware

fujifilm apeosport c2560 g firmware

fujifilm apeosport c2060 g firmware

fujifilm apeosport c7070 firmware

fujifilm apeosport c4570 firmware

fujifilm apeosport c3570 firmware

fujifilm apeosport c3070 firmware

fujifilm apeosport c6570 firmware

fujifilm apeosport c5570 firmware

fujifilm apeosport c7070 g firmware

fujifilm apeosport c4570 g firmware

fujifilm apeosport c3570 g firmware

fujifilm apeosport c3070 g firmware

fujifilm apeosport c6570 g firmware

fujifilm apeosport c5570 g firmware

fujifilm apeosport print c5570 firmware

fujifilm apeosport-vii 5021 firmware

fujifilm apeosport-vii p4021 firmware

fujifilm apeosport-vii 4021 firmware

fujifilm apeosport-vii cp4421 firmware

fujifilm apeosport-vii c4421 firmware

fujifilm apeosport-vii c3321 firmware

fujifilm apeosport-vii c7773 firmware

fujifilm apeosport-vii c6773 firmware

fujifilm apeosport-vii c5573 firmware

fujifilm apeosport-vii c4473 firmware

fujifilm apeosport-vii c3373 firmware

fujifilm apeosport-vii c3372 firmware

fujifilm apeosport-vii c2273 firmware

fujifilm apeosport-vii c7788 firmware

fujifilm apeosport-vii c6688 firmware

fujifilm apeosport-vii c5588 firmware

fujifilm apeospro c810 firmware

fujifilm apeospro c750 firmware

fujifilm apeospro c650 firmware

fujifilm apeosprint c328 firmware

fujifilm apeosprint c328 dw firmware

fujifilm apeosprint c325 dw firmware

fujifilm docucentre-vii c7773 firmware

fujifilm docucentre-vii c6673 firmware

fujifilm docucentre-vii c5573 firmware

fujifilm docucentre-vii c4473 firmware

fujifilm docucentre-vii c3373 firmware

fujifilm docucentre-vii c3372 firmware

fujifilm docucentre-vii c2273 firmware

fujifilm docucentre-vii c7788 firmware

fujifilm docucentre-vii c6688 firmware

fujifilm docucentre-vii c5588 firmware

fujifilm docuprint 4405 d firmware

fujifilm docuprint 4408 d firmware

fujifilm docuprint 3505 d firmware

fujifilm docuprint 3508 d firmware

fujifilm docuprint 3205 d firmware

fujifilm docuprint 3208 d firmware

fujifilm docuprint c3555 d firmware

fujifilm docuprint c2555 d firmware

fujifilm primelink c9070 firmware

fujifilm primelink c9065 firmware

canon imagerunner firmware

canon imageprograf firmware

Github Repositories

https://github.com/google/paranoid_crypto

Paranoid's library contains implementations of checks for well known weaknesses on cryptographic artifacts.

Project Paranoid Overview Paranoid project checks for well known weaknesses on cryptographic artifacts such as public keys, digital signatures and general pseudorandom numbers This library contains implementations and optimizations of existing work found in the literature The existing work showed that the generation of these artifacts was flawed in some cases The following

References

CWE-330https://fermatattack.secvuln.infohttps://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.htmlhttps://safezoneswupdate.comhttps://global.canon/en/support/security/index.htmlhttps://nvd.nist.govhttps://github.com/google/paranoid_crypto
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook