CVE-2018-16709

Critical

Description

Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.

SeverityCritical
CVSS9.8
Exploit probability—
ProductFujixerox Docucentre-v 3065 Firmware
PublishedSep 7, 2018
First seenSep 7, 2018

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
fujixerox docucentre-v_3065_firmwareNo range specified—
fujixerox apeosport-v_c4475_firmwareNo range specified—
fujixerox apeosport-vi_c3371_firmwareNo range specified—
fujixerox apeosport-v_c3375_firmwareNo range specified—
fujixerox docucentre-vi_c2271_firmwareNo range specified—
fujixerox apeosport-v_c5576_firmwareNo range specified—
fujixerox docucentre-iv_c2263_firmwareNo range specified—
fujixerox docucentre-v_c2263_firmwareNo range specified—
fujixerox apeosport-v_5070_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.