CVE-2022-26320

The issue affects Rambus SafeZone Basic Crypto Module versions prior to 10.4.0, incorporated in certain Fujifilm (formerly Fuji Xerox) devices and Canon imagePROGRAF/imageRUNNER devices. The root cause is insecure RSA key generation in the CLS PK KeyGenMT() routine, due to insufficient randomness...

PT-2022-17805

Name of the Vulnerable Software and Affected Versions Canon imagePROGRAF and imageRUNNER devices affected versions not specified Description The issue allows for the efficient calculation of private RSA keys from the public key of a TLS certificate using Fermat's factorization method, due to the...

CVE-2022-26320: Use of Insufficiently Random Values

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm formerly Fuji Xerox devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization...