CVE-2021-43774

Medium

Description

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer (e.g., by using the default credentials) can download the address book file, which contains the list of users (domain users, FTP users, etc.) stored on the printer, together with their encrypted passwords. The passwords are protected by a weak cipher, such as ROT13, which requires minimal effort to instantly retrieve the original password, giving the attacker a list of valid domain or FTP usernames and passwords.

SeverityMedium
CVSS4.9
Exploit probability—
ProductFujifilm Docucentre-v 1060 Firmware
PublishedMar 3, 2022
First seenMar 3, 2022

How to fix

Update
  • fujifilm docucentre-v_1060_firmware1.57.1 or later
  • fujifilm apeosport-iv_3065_firmware1.160.5 or later
  • fujifilm apeosport-iv_3060_firmware1.160.5 or later
  • fujifilm apeosport-iv_2060_firmware1.160.5 or later
  • fujifilm apeosport-iv_5070_firmware1.140.5 or later
  • fujifilm apeosport-iv_4070_firmware1.140.5 or later
  • fujifilm apeosport-iv_3070_firmware1.140.5 or later
  • fujifilm apeosport-iv_c4430_firmware1.772.4 or later
  • fujifilm apeosport-v_4020_firmware1.57.2 or later
  • fujifilm apeosport-v_4070_firmware1.57.2 or later
  • fujifilm apeosport-v_5070_firmware1.57.2 or later
  • fujifilm apeosport-v_c3320_firmware1.57.2 or later

Affected products

ProductAffected versionsFixed in
fujifilm docucentre-v_1060_firmwarev < 1.57.11.57.1
fujifilm apeosport-iv_7080_firmwareNo range specified—
fujifilm apeosport-iv_6080_firmwareNo range specified—
fujifilm apeosport-iv_5080_firmwareNo range specified—
fujifilm apeosport-iv_3065_firmwarev < 1.160.51.160.5
fujifilm apeosport-iv_3060_firmwarev < 1.160.51.160.5
fujifilm apeosport-iv_2060_firmwarev < 1.160.51.160.5
fujifilm apeosport-iv_5070_firmwarev < 1.140.51.140.5
fujifilm apeosport-iv_4070_firmwarev < 1.140.51.140.5
fujifilm apeosport-iv_3070_firmwarev < 1.140.51.140.5
fujifilm apeosport-iv_c4430_firmwarev < 1.772.41.772.4
fujifilm apeosport-iv_c5570_firmwareNo range specified—
fujifilm apeosport-iv_c4470_firmwareNo range specified—
fujifilm apeosport-iv_c3370_firmwareNo range specified—
fujifilm apeosport-iv_c2270_firmwareNo range specified—
fujifilm apeosport-iv_c5575_firmwareNo range specified—
fujifilm apeosport-iv_c4475_firmwareNo range specified—
fujifilm apeosport-iv_c3375_firmwareNo range specified—
fujifilm apeosport-iv_c2275_firmwareNo range specified—
fujifilm apeosport-iv_c7780_firmwareNo range specified—
fujifilm apeosport-iv_c6680_firmwareNo range specified—
fujifilm apeosport-iv_c5580_firmwareNo range specified—
fujifilm apeosport-v_4020_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_4070_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_5070_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c3320_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c5585_firmwarev < 1.60.01.60.0
fujifilm apeosport-v_c6685_firmwarev < 1.60.01.60.0
fujifilm apeosport-v_c7785_firmwarev < 1.60.01.60.0
fujifilm apeosport-v_c7775_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c6675_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c5575_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c4475_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c3375_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c2275_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c7775_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-v_c6675_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-v_c5575_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-v_c4475_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-v_c3375_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-v_c3373_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-v_c2275_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-v_c7776_firmwarev < 1.60.01.60.0
fujifilm apeosport-v_c6676_firmwarev < 1.60.01.60.0
fujifilm apeosport-v_c5576_firmwarev < 1.60.01.60.0
fujifilm apeosport-v_c4476_firmwarev < 1.60.01.60.0
fujifilm apeosport-v_c3376_firmwarev < 1.60.01.60.0
fujifilm apeosport-v_c2276_firmwarev < 1.60.01.60.0
fujifilm apeosport-v_c7780_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c6680_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c5580_firmwarev < 1.57.21.57.2
fujifilm apeosport-v_c7780_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-v_c6680_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-v_c5580_t2_firmwarev < 2.60.02.60.0
fujifilm apeosport-vi_c7771_firmwarev < 1.60.41.60.4
fujifilm apeosport-vi_c6671_firmwarev < 1.60.41.60.4
fujifilm apeosport-vi_c5571_firmwarev < 1.60.41.60.4
fujifilm apeosport-vi_c4471_firmwarev < 1.60.41.60.4
fujifilm apeosport-vi_c3371_firmwarev < 1.60.41.60.4
fujifilm apeosport-vi_c3370_firmwarev < 1.60.41.60.4
fujifilm apeosport-vi_c2271_firmwarev < 1.60.41.60.4
fujifilm apeosport-vii_c7773_firmwarev < 1.60.51.60.5
fujifilm apeosport-vii_c6673_firmwarev < 1.60.51.60.5
fujifilm apeosport-vii_c5573_firmwarev < 1.60.51.60.5
fujifilm apeosport-vii_c4473_firmwarev < 1.60.51.60.5
fujifilm apeosport-vii_c3373_firmwarev < 1.60.51.60.5
fujifilm apeosport-vii_c3372_firmwarev < 1.60.51.60.5
fujifilm apeosport-vii_c2273_firmwarev < 1.60.51.60.5
fujifilm docucentre-iv_3060_firmwarev < 1.140.51.140.5
fujifilm docucentre-iv_2060_firmwarev < 1.140.51.140.5
fujifilm docucentre-iv_5070_firmwarev < 1.140.51.140.5
fujifilm docucentre-iv_4070_firmwarev < 1.140.51.140.5
fujifilm docucentre-iv_7080_firmwareNo range specified—
fujifilm docucentre-iv_6080_firmwareNo range specified—
fujifilm docucentre-iv_5080_firmwareNo range specified—
fujifilm docucentre-iv_c2260_firmwareNo range specified—
fujifilm docucentre-iv_c2263_firmwarev < 1.57.21.57.2
fujifilm docucentre-iv_c2265_firmwarev < 1.57.21.57.2
fujifilm docucentre-iv_c4430_firmwarev < 1.772.41.772.4
fujifilm docucentre-iv_c5570_firmwareNo range specified—
fujifilm docucentre-iv_c4470_firmwareNo range specified—
fujifilm docucentre-iv_c3370_firmwareNo range specified—
fujifilm docucentre-iv_c2270_firmwareNo range specified—
fujifilm docucentre-iv_c5575_firmwareNo range specified—
fujifilm docucentre-iv_c4475_firmwareNo range specified—
fujifilm docucentre-iv_c3375_firmwareNo range specified—
fujifilm docucentre-iv_c2275_firmwareNo range specified—
fujifilm docucentre-iv_c7780_firmwareNo range specified—
fujifilm docucentre-iv_c6680_firmwareNo range specified—
fujifilm docucentre-iv_c5580_firmwareNo range specified—
fujifilm docucentre-v_2060_firmwarev < 1.57.11.57.1
fujifilm docucentre-v_3060_firmwarev < 1.57.11.57.1
fujifilm docucentre-v_4070_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_5070_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_7080_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_6080_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_5080_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c2263_firmwarev < 1.57.11.57.1
fujifilm docucentre-v_c2265_firmwarev < 1.57.11.57.1
fujifilm docucentre-v_c5585_firmwarev < 1.60.01.60.0
fujifilm docucentre-v_c6685_firmwarev < 1.60.01.60.0
fujifilm docucentre-v_c7785_firmwarev < 1.60.01.60.0
fujifilm docucentre-v_c7775_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c6675_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c5575_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c4475_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c3375_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c2275_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c7775_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-v_c6675_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-v_c5575_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-v_c4475_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-v_c3375_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-v_c3373_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-v_c2275_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-v_c7776_firmwarev < 1.60.01.60.0
fujifilm docucentre-v_c6676_firmwarev < 1.60.01.60.0
fujifilm docucentre-v_c5576_firmwarev < 1.60.01.60.0
fujifilm docucentre-v_c4476_firmwarev < 1.60.01.60.0
fujifilm docucentre-v_c3376_firmwarev < 1.60.01.60.0
fujifilm docucentre-v_c2276_firmwarev < 1.60.01.60.0
fujifilm docucentre-v_c7780_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c6680_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c5580_firmwarev < 1.57.21.57.2
fujifilm docucentre-v_c7780_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-v_c6680_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-v_c5580_t2_firmwarev < 2.60.02.60.0
fujifilm docucentre-vi_c7771_firmwarev < 1.60.41.60.4
fujifilm docucentre-vi_c6671_firmwarev < 1.60.41.60.4
fujifilm docucentre-vi_c5571_firmwarev < 1.60.41.60.4
fujifilm docucentre-vi_c4471_firmwarev < 1.60.41.60.4
fujifilm docucentre-vi_c3371_firmwarev < 1.60.41.60.4
fujifilm docucentre-vi_c3370_firmwarev < 1.60.41.60.4
fujifilm docucentre-vi_c2271_firmwarev < 1.60.41.60.4
fujifilm docucentre-vii_c7773_firmwarev < 1.60.51.60.5
fujifilm docucentre-vii_c6673_firmwarev < 1.60.51.60.5
fujifilm docucentre-vii_c5573_firmwarev < 1.60.51.60.5
fujifilm docucentre-vii_c4473_firmwarev < 1.60.51.60.5
fujifilm docucentre-vii_c3373_firmwarev < 1.60.51.60.5
fujifilm docucentre-vii_c3372_firmwarev < 1.60.51.60.5
fujifilm docucentre-vii_c2273_firmwarev < 1.60.51.60.5
fujifilm docucolor_1450_ga_firmwarev < 1.57.51.57.5
fujifilm docuprint_m465_ap_firmwarev < 1.57.21.57.2
fujifilm docuprint_cm415_ap_firmwarev < 1.57.21.57.2
fujifilm docuprint_cm505da_firmwarev < 1.772.41.772.4
fujifilm fuji_xerox_color_c60_firmwarev < 1.142.21.142.2
fujifilm fuji_xerox_color_c70_firmwarev < 1.142.21.142.2
fujifilm fuji_xerox_color_c75_firmwarev < 1.57.11.57.1
fujifilm fuji_xerox_d125_firmwarev < 1.145.41.145.4
fujifilm fuji_xerox_d110_firmwarev < 1.145.41.145.4
fujifilm fuji_xerox_d95_firmwarev < 1.145.41.145.4
fujifilm fuji_xerox_d136_firmwarev < 1.57.11.57.1
fujifilm fuji_xerox_b9100_firmwarev < 1.60.11.60.1
fujifilm fuji_xerox_b9110_firmwarev < 1.60.11.60.1
fujifilm fuji_xerox_b9125_firmwarev < 1.60.11.60.1
fujifilm fuji_xerox_b9136_firmwarev < 1.60.11.60.1
fujifilm versant_170i_firmwarev < 1.57.31.57.3
fujifilm versant_180i_firmwarev < 1.57.31.57.3
fujifilm versant_80_firmwarev < 1.57.11.57.1
fujifilm versant_180_firmwarev < 1.57.11.57.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.