Fuji Xerox / Fujifilm Printer Detection (HTTP)

HTTP based detection of Fuji Xerox / Fujifilm printer devices. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

fujifilm-houseofphotography.com Cross Site Scripting vulnerability OBB-3404241

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

JVN#22830348: Vulnerability in Driver Distributor where passwords are stored in a recoverable format

Driver Distributor provided by FUJIFILM Business Innovation Corp. contains a vulnerability where passwords are stored in a recoverable format CWE-257. Impact If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator's credentials may be decrypted. Solution...

FUJIFILM Driver Distributor 加密问题漏洞

FUJIFILM Driver Distributor is a driver from FUJIFILM. A security vulnerability exists in FUJIFILM Driver Distributor v2.2.3.1 and earlier versions, which originates from passwords being stored in a recoverable format, and encrypted administrator credentials can be decrypted if an attacker gains...

The vulnerability of the monitoring software for Fujifilm’s PLK devices, V-Server and V-Server Lite, arises from the possibility of writing operations outside of the buffer in memory. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the monitoring software for Fujifilm’s PLC models, V-Server and V-Server Lite, lies in the fact that the write operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute...

fujifilm-printlife.eu Cross Site Scripting vulnerability OBB-2455415

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fujifilm / Fuji Xerox Printers Cryptography Vulnerability (Mar 2022)

Multiple Fujifilm / Fuji Xerox printers are prone to a cryptography vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...

CVE-2022-26320

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm formerly Fuji Xerox devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization...

Format string

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm formerly Fuji Xerox devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization...

CVE-2022-26320

The issue affects Rambus SafeZone Basic Crypto Module versions prior to 10.4.0, incorporated in certain Fujifilm (formerly Fuji Xerox) devices and Canon imagePROGRAF/imageRUNNER devices. The root cause is insecure RSA key generation in the CLS PK KeyGenMT() routine, due to insufficient randomness...

CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

Default credentials

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

CVE-2021-43774

The CVE affects Fujifilm DocuCentre-VI C4471 (1.8) devices. An attacker who gains access to the printer’s administrative web interface (e.g., via default credentials) can download the address book file containing user lists (domain/FTP users, etc.). The passwords are protected by a weak cipher (e...

Fujifilm DocuCentre 加密问题漏洞

Fujifilm DocuCentre is a series of color multifunction printers from Fujifilm Japan. A security vulnerability exists in the Fujifilm DocuCentre VI C4471, which stems from a risky algorithmic issue discovered on Fujifilm DocuCentre-VI C4471 1.8 devices...

Unauthorized Access Vulnerability in Fujifilm DocuPrint M355 df

Established on January 3, 1995, Fujifilm is a wholly owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox China Co., Ltd. is headquartered in Beijing. An unauthorized access vulnerability exists in the Fujifilm DocuPrint M355 df, which can be exploit...

Unauthorized Access Vulnerability in Fujifilm DocuPrint CM305 df Series Printers

Established on January 3, 1995, Fujifilm is a wholly owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox China Co., Ltd. is headquartered in Beijing. An unauthorized access vulnerability exists in the Fujifilm DocuPrint CM305 df, which can be...

A week in security (May 31 – June 6)

Last week on Malwarebytes Labs, we looked at an interesting trend in facial recognition technology—hint: its a slow fade, the latest ransomware attacks on JBS and Steamship Authority, Cobalt Strike, a Coronavirus phishing campaign, WhatsApp’s decision to not limit app functionalities for...

Cyberattack Suspected in Cox TV and Radio Outages

A reported ransomware attack on Cox Media Group CMG has crippled streaming and other internal operations of dozens of radio and television stations scattered across America’s 20 broadcast markets. CMG has won’t comment on the reported attack and hasn’t responded to a request for comment. A member...

Unauthorized Access Vulnerability in Multiple Fujifilm Printers

Fujifilm has grown to become one of the world's largest comprehensive manufacturers and suppliers of imaging, information, and document processing products and services. An unauthorized access vulnerability exists in multiple Fujifilm printers. An attacker can exploit the vulnerability to obtain...