CVE-2023-46327
Medium
Description
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
SeverityMedium
CVSS5.9
Exploit probability—
ProductXerox Primelink C9065 Firmware
PublishedNov 2, 2023
First seenNov 2, 2023
How to fix
Update
- xerox primelink_c9065_firmware85.40.31 or later
- xerox primelink_c9070_firmware85.40.31 or later
- xerox primelink_b9136_firmware90.40.91 or later
- xerox primelink_b9125_firmware90.40.91 or later
- xerox primelink_b9110_firmware90.40.91 or later
- xerox primelink_b9100_firmware90.40.91 or later
- xerox versalink_c405_firmware68.81.41 or later
- xerox versalink_c505_firmware68.81.41 or later
- xerox versalink_c605_firmware68.81.41 or later
- xerox versalink_c7000_firmware56.74.51 or later
- xerox versalink_c7020_firmware57.74.51 or later
- xerox versalink_c7025_firmware57.74.51 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xerox primelink_c9065_firmware | v < 85.40.31 | 85.40.31 |
| xerox primelink_c9070_firmware | v < 85.40.31 | 85.40.31 |
| xerox primelink_b9136_firmware | v < 90.40.91 | 90.40.91 |
| xerox primelink_b9125_firmware | v < 90.40.91 | 90.40.91 |
| xerox primelink_b9110_firmware | v < 90.40.91 | 90.40.91 |
| xerox primelink_b9100_firmware | v < 90.40.91 | 90.40.91 |
| xerox versalink_c405_firmware | v < 68.81.41 | 68.81.41 |
| xerox versalink_c505_firmware | v < 68.81.41 | 68.81.41 |
| xerox versalink_c605_firmware | v < 68.81.41 | 68.81.41 |
| xerox versalink_c7000_firmware | v < 56.74.51 | 56.74.51 |
| xerox versalink_c7020_firmware | v < 57.74.51 | 57.74.51 |
| xerox versalink_c7025_firmware | v < 57.74.51 | 57.74.51 |
| xerox versalink_c7030_firmware | v < 57.74.51 | 57.74.51 |
| xerox versalink_c7130_firmware | v < 69.23.41 | 69.23.41 |
| xerox versalink_c7125_firmware | v < 69.23.41 | 69.23.41 |
| xerox versalink_c7120_firmware | v < 69.23.41 | 69.23.41 |
| xerox versalink_b405_firmware | v < 38.81.41 | 38.81.41 |
| xerox versalink_b605_firmware | v < 38.81.41 | 38.81.41 |
| xerox versalink_b615_firmware | v < 38.81.41 | 38.81.41 |
| xerox versalink_b7125_firmware | v < 59.23.41 | 59.23.41 |
| xerox versalink_b7130_firmware | v < 59.23.41 | 59.23.41 |
| xerox versalink_b7135_firmware | v < 59.23.41 | 59.23.41 |
| xerox workcentre_6515_firmware | v < 65.74.51 | 65.74.51 |
| fujifilm apeos_3560_firmware | 1.0.0 ≤ v ≤ 1.2.16, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_3060_firmware | 1.0.0 ≤ v ≤ 1.2.16, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_2560_firmware | 1.0.0 ≤ v ≤ 1.2.16, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_3560_gk_firmware | 1.0.0 ≤ v ≤ 1.2.16, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_3060_gk_firmware | 1.0.0 ≤ v ≤ 1.2.16, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_2560_gk_firmware | 1.0.0 ≤ v ≤ 1.2.16, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_5330_firmware | v < 1.20.9 | 1.20.9 |
| fujifilm apeos_4830_firmware | v < 1.20.9 | 1.20.9 |
| fujifilm apeos_5570_firmware | 1.0.0 ≤ v ≤ 1.3.6, 1.21.0 ≤ v ≤ 1.26.9 | — |
| fujifilm apeos_4570_firmware | 1.0.0 ≤ v ≤ 1.3.6, 1.21.0 ≤ v ≤ 1.26.9 | — |
| fujifilm apeos_6340_firmware | 1.0.0 ≤ v ≤ 1.2.11, 1.20.0 ≤ v ≤ 1.20.6 | — |
| fujifilm apeos_7580_firmware | v < 1.26.9 | 1.26.9 |
| fujifilm apeos_6580_firmware | v < 1.26.9 | 1.26.9 |
| fujifilm apeos_c2570_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm apeos_c3070_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm apeos_c3570_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm apeos_c4570_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm apeos_c5570_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm apeos_c6570_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm apeos_c7070_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm apeos_c3060_firmware | 1.0.0 ≤ v ≤ 1.2.14, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_c2060_firmware | 1.0.0 ≤ v ≤ 1.2.14, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_c2560_firmware | 1.0.0 ≤ v ≤ 1.2.14, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_c3060_gk_firmware | 1.0.0 ≤ v ≤ 1.2.14, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_c2560_gk_firmware | 1.0.0 ≤ v ≤ 1.2.14, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_c2060_gk_firmware | 1.0.0 ≤ v ≤ 1.2.14, 1.20.0 ≤ v ≤ 1.26.10 | — |
| fujifilm apeos_c4030_firmware | v < 1.20.10 | 1.20.10 |
| fujifilm apeos_c3530_firmware | v < 1.20.10 | 1.20.10 |
| fujifilm apeos_c5240_firmware | 1.0.0 ≤ v ≤ 1.2.12, 1.20.0 ≤ v ≤ 1.20.6 | — |
| fujifilm apeos_c8180_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.12 | — |
| fujifilm apeos_c7580_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.12 | — |
| fujifilm apeos_c6580_firmware | 1.0.0 ≤ v ≤ 1.3.7, 1.21.0 ≤ v ≤ 1.26.12 | — |
| fujifilm apeosport_c3060_firmware | 1.0.0 ≤ v ≤ 1.60.15 | — |
| fujifilm apeosport_c2560_firmware | 1.0.0 ≤ v ≤ 1.60.15 | — |
| fujifilm apeosport_c2060_firmware | 1.0.0 ≤ v ≤ 1.60.15 | — |
| fujifilm apeosport_c3060_g_firmware | 1.0.0 ≤ v ≤ 1.60.15 | — |
| fujifilm apeosport_c2560_g_firmware | 1.0.0 ≤ v ≤ 1.60.15 | — |
| fujifilm apeosport_c2060_g_firmware | 1.0.0 ≤ v ≤ 1.60.15 | — |
| fujifilm apeosport_3560_firmware | 1.0.0 ≤ v ≤ 1.60.16 | — |
| fujifilm apeosport_3060_firmware | 1.0.0 ≤ v ≤ 1.60.16 | — |
| fujifilm apeosport_2560_firmware | 1.0.0 ≤ v ≤ 1.60.16 | — |
| fujifilm apeosport_3560_g_firmware | 1.0.0 ≤ v ≤ 1.60.16 | — |
| fujifilm apeosport_3060_g_firmware | 1.0.0 ≤ v ≤ 1.60.16 | — |
| fujifilm apeosport_2560_g_firmware | 1.0.0 ≤ v ≤ 1.60.16 | — |
| fujifilm apeosport_5570_firmware | v ≤ 1.60.16 | — |
| fujifilm apeosport_4570_firmware | v ≤ 1.60.16 | — |
| fujifilm apeosport_3570_firmware | v ≤ 1.60.16 | — |
| fujifilm apeosport_5570_g_firmware | v ≤ 1.60.16 | — |
| fujifilm apeosport_4570_g_firmware | v ≤ 1.60.16 | — |
| fujifilm apeosport_c7070_firmware | v ≤ 1.60.18 | — |
| fujifilm apeosport_c6570_firmware | v ≤ 1.60.18 | — |
| fujifilm apeosport_c5570_firmware | v ≤ 1.60.18 | — |
| fujifilm apeosport_c4570_firmware | v ≤ 1.60.18 | — |
| fujifilm apeosport_c3570_firmware | v ≤ 1.60.18 | — |
| fujifilm apeosport_c3070_firmware | v ≤ 1.60.18 | — |
| fujifilm apeosport-vii_5021_firmware | 1.0.0 ≤ v < 1.60.3, 1.60.3 < v < 1.60.16 | 1.60.3, 1.60.16 |
| fujifilm apeosport-vii_4021_firmware | 1.0.0 ≤ v < 1.60.3, 1.60.3 < v < 1.60.16 | 1.60.3, 1.60.16 |
| fujifilm apeosport-vii_c4421_firmware | 1.0.0 ≤ v < 1.60.3, 1.60.3 < v < 1.60.16 | 1.60.3, 1.60.16 |
| fujifilm apeosport-vii_c3321_firmware | 1.0.0 ≤ v < 1.60.3, 1.60.3 < v < 1.60.16 | 1.60.3, 1.60.16 |
| fujifilm apeospro_c810_firmware | 1.0.0 ≤ v ≤ 1.3.6, 1.21.0 ≤ v ≤ 1.26.14 | — |
| fujifilm apeospro_c750_firmware | 1.0.0 ≤ v ≤ 1.3.6, 1.21.0 ≤ v ≤ 1.26.14 | — |
| fujifilm apeospro_c650_firmware | 1.0.0 ≤ v ≤ 1.3.6, 1.21.0 ≤ v ≤ 1.26.14 | — |
| fujifilm primelink_c9070_firmware | v < 1.145.4 | 1.145.4 |
| fujifilm primelink_c9065_firmware | v < 1.145.4 | 1.145.4 |
| fujifilm revoria_press_e1136_firmware | 1.0.0 ≤ v ≤ 1.3.5, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm revoria_press_e1125_firmware | 1.0.0 ≤ v ≤ 1.3.5, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm revoria_press_e1110_firmware | 1.0.0 ≤ v ≤ 1.3.5, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm revoria_press_e1100_firmware | 1.0.0 ≤ v ≤ 1.3.5, 1.21.0 ≤ v ≤ 1.26.11 | — |
| fujifilm revoria_press_sc180_firmware | v < 1.22.8 | 1.22.8 |
| fujifilm revoria_press_sc170_firmware | v < 1.22.8 | 1.22.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.