Search
Find a vulnerability
Search criteria
18 vulnerabilities by Fujifilm
VAR-201709-0219
Vulnerability from variot - Updated: 2025-04-20 23:22Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Installers for multiple products provided by Fuji Xerox Co., Ltd. DocuWorks For self-extracting documents, DLL There is a problem with the search path when reading or executing a self-extracting document, which is unintended. DLL Reading vulnerability (CWE-427) Exists. This vulnerability information is based on the Information Security Early Warning Partnership. IPA Report to JPCERT/CC Coordinated with the developers. Reporter : Tachibana Research Institute Hidetoshi Masami MrThe expected impact depends on each vulnerability, but it may be affected as follows. -Arbitrary code is executed with administrator privileges when the installer is started. - CVE-2017-10848, CVE-2017-10850, CVE-2017-10851 ・ DocuWorks Arbitrary code is executed with the authority of the user who executed the self-extracting document - CVE-2017-10849. FujiXeroxDocuCentre-VI and ApeosPort-VI are digital copier PCL print drivers. There are several untrusted search path vulnerabilities in the FujiXerox product installer. Allows an attacker to gain privileges by logging in an unknown Trojan DLL directory
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201709-0219",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c6671"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c4471"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c7771"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c2271"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c5571"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c3371"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c4471"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c6671"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c7771"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c3371"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c2271"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": "c5571"
},
{
"model": "contentsbridge utility",
"scope": null,
"trust": 0.8,
"vendor": "\u5bcc\u58eb\u30bc\u30ed\u30c3\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "docuworks viewer light",
"scope": null,
"trust": 0.8,
"vendor": "\u5bcc\u58eb\u30bc\u30ed\u30c3\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "apeosport-vi",
"scope": null,
"trust": 0.8,
"vendor": "\u5bcc\u58eb\u30bc\u30ed\u30c3\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": null
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.8,
"vendor": "\u5bcc\u58eb\u30bc\u30ed\u30c3\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": "c7771/c6671/c5571/c4471/c3371/c2271 for art ex driver installer ( digitally signed time stamp is japan time 2017 year 4 moon 12 day 11:04 before )(cve-2017-10850)"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.8,
"vendor": "\u5bcc\u58eb\u30bc\u30ed\u30c3\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": "c7771/c6671/c5571/c4471/c3371/c2271 for postscript driver microsoft pscript for + function addition plugin + ppd file installer ( digitally signed time stamp is japan time 2017 year 4 moon 12 day 11:10 before )(cve-2017-10850)"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.8,
"vendor": "\u5bcc\u58eb\u30bc\u30ed\u30c3\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": "c7771/c6671/c5571/c4471/c3371/c2271 for xps supported driver installer ( digitally signed time stamp is japan time 2016 year 11 moon 4 day 08:48 before )(cve-2017-10850)"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.8,
"vendor": "\u5bcc\u58eb\u30bc\u30ed\u30c3\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": "c7771/c6671/c5571/c4471/c3371/c2271 for art ex direct fax driver installer ( digitally signed time stamp is japan time 2017 year 5 moon 26 day 16:44 before )(cve-2017-10850)"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.8,
"vendor": "\u5bcc\u58eb\u30bc\u30ed\u30c3\u30af\u30b9\u682a\u5f0f\u4f1a\u793e",
"version": "c7771/c6671/c5571/c4471/c3371/c2271 configuration restore tool installer for ( digitally signed time stamp is japan time 2015 year 8 moon 25 day 17:51 before )(cve-2017-10850)"
},
{
"model": "xerox co.,ltd. docucentre-vi c2271",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. docucentre-vi c3371",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. docucentre-vi c4471",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. docucentre-vi c5571",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. docucentre-vi c6671",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. docucentre-vi c7771",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. apeosport-vi c2271",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. apeosport-vi c3371",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. apeosport-vi c4471",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. apeosport-vi c5571",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. apeosport-vi c6671",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "xerox co.,ltd. apeosport-vi c7771",
"scope": null,
"trust": 0.6,
"vendor": "fuji",
"version": null
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c4471"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c2271"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c5571"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c3371"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c7771"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c2271"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c5571"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c6671"
},
{
"model": "apeosport-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c7771"
},
{
"model": "docucentre-vi",
"scope": "eq",
"trust": 0.6,
"vendor": "fujixerox",
"version": "c3371"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-30714"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-028"
},
{
"db": "NVD",
"id": "CVE-2017-10850"
}
]
},
"cve": "CVE-2017-10850",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CVE-2017-10850",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "IPA",
"availabilityImpact": "Partial",
"baseScore": 6.8,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2017-000219",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CNVD-2017-30714",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.8,
"id": "CVE-2017-10850",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Local",
"author": "IPA",
"availabilityImpact": "High",
"baseScore": 7.8,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2017-000219",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-10850",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "IPA",
"id": "JVNDB-2017-000219",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2017-30714",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201709-028",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-30714"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-028"
},
{
"db": "NVD",
"id": "CVE-2017-10850"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Installers for multiple products provided by Fuji Xerox Co., Ltd. DocuWorks For self-extracting documents, DLL There is a problem with the search path when reading or executing a self-extracting document, which is unintended. DLL Reading vulnerability (CWE-427) Exists. This vulnerability information is based on the Information Security Early Warning Partnership. IPA Report to JPCERT/CC Coordinated with the developers. Reporter : Tachibana Research Institute Hidetoshi Masami MrThe expected impact depends on each vulnerability, but it may be affected as follows. -Arbitrary code is executed with administrator privileges when the installer is started. - CVE-2017-10848, CVE-2017-10850, CVE-2017-10851 \u30fb DocuWorks Arbitrary code is executed with the authority of the user who executed the self-extracting document - CVE-2017-10849. FujiXeroxDocuCentre-VI and ApeosPort-VI are digital copier PCL print drivers. There are several untrusted search path vulnerabilities in the FujiXerox product installer. Allows an attacker to gain privileges by logging in an unknown Trojan DLL directory",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-10850"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"db": "CNVD",
"id": "CNVD-2017-30714"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-10850",
"trust": 3.0
},
{
"db": "JVN",
"id": "JVN09769017",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000219",
"trust": 1.4
},
{
"db": "CNVD",
"id": "CNVD-2017-30714",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201709-028",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-30714"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-028"
},
{
"db": "NVD",
"id": "CVE-2017-10850"
}
]
},
"id": "VAR-201709-0219",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-30714"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-30714"
}
]
},
"last_update_date": "2025-04-20T23:22:12.304000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "In the software provided by us DLL About read vulnerability",
"trust": 0.8,
"url": "https://www.fujifilm.com/fb/company/news/notice/2017/0831_rectification_work.html"
},
{
"title": "Patches for multiple FujiXerox product installers untrusted search path vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/104093"
},
{
"title": "Fuji Xerox ApeosPort-VI and DocuCentre-VI Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=147283"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-30714"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-028"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-426",
"trust": 1.0
},
{
"problemtype": "Other (CWE-Other) [IPA Evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"db": "NVD",
"id": "CVE-2017-10850"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://jvn.jp/en/jp/jvn09769017/index.html"
},
{
"trust": 1.6,
"url": "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html"
},
{
"trust": 0.8,
"url": "https://jvn.jp/jp/jvn09769017/index.html"
},
{
"trust": 0.8,
"url": "https://jvn.jp/ta/jvnta91240916/"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-10848"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-10849"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-10850"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-10851"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2017/jvndb-2017-000219.html"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-30714"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-028"
},
{
"db": "NVD",
"id": "CVE-2017-10850"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2017-30714"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-028"
},
{
"db": "NVD",
"id": "CVE-2017-10850"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-10-19T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-30714"
},
{
"date": "2017-08-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"date": "2017-09-01T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201709-028"
},
{
"date": "2017-09-01T14:29:00.290000",
"db": "NVD",
"id": "CVE-2017-10850"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-10-19T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-30714"
},
{
"date": "2021-04-12T04:30:00",
"db": "JVNDB",
"id": "JVNDB-2017-000219"
},
{
"date": "2021-04-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201709-028"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-10850"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201709-028"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "In multiple products manufactured by Fuji Xerox Co., Ltd. \u00a0DLL\u00a0 Read vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-000219"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "code problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201709-028"
}
],
"trust": 0.6
}
}
VAR-202502-2287
Vulnerability from variot - Updated: 2025-03-02 23:31ApeosPort-IV C3370 is a color digital multifunction printer with multiple functions including copy, print, scan and fax (optional).
FUJIFILM Corporation ApeosPort-IV C3370 has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information.
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202502-2287",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "apeosport-iv c3370",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04019"
}
]
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2025-04019",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2025-04019",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04019"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "ApeosPort-IV C3370 is a color digital multifunction printer with multiple functions including copy, print, scan and fax (optional).\n\nFUJIFILM Corporation ApeosPort-IV C3370 has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04019"
}
],
"trust": 0.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-04019",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04019"
}
]
},
"id": "VAR-202502-2287",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04019"
}
],
"trust": 0.06
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04019"
}
]
},
"last_update_date": "2025-03-02T23:31:27.721000Z",
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-04019"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-02-23T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-04019"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-02-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-04019"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "FUJIFILM Corporation ApeosPort-IV C3370 has an unauthorized access vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04019"
}
],
"trust": 0.6
}
}
VAR-201904-1018
Vulnerability from variot - Updated: 2024-11-23 22:55Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted. Fujifilm CR-IR357FCRCarbonX and others are all radioactive medical image reading devices of Fujifilm Corporation of Japan. A resource management error vulnerability exists in FujifilmCR-IR357FCRCarbonX, FCRXC-2, and FCRCapsulaX that could be exploited by an attacker to cause a denial of service. Fujifilm FCR Capsula X/Carbon X are prone to a denial-of-service vulnerability and an access-bypass vulnerability. An attacker can exploit these issues to bypass certain security restrictions and perform unauthorized actions or cause a denial-of-service condition. This vulnerability stems from improper management of system resources (such as memory, disk space, files, etc.) by network systems or products
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201904-1018",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "cr-ir 357 fcr xc-2",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr carbon x",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr capsula x",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr capsula x",
"scope": null,
"trust": 0.8,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr carbon x",
"scope": null,
"trust": 0.8,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr xc-2",
"scope": null,
"trust": 0.8,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir fcr carbon",
"scope": "eq",
"trust": 0.6,
"vendor": "fujifilm",
"version": "357x"
},
{
"model": "fcr xc-2",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
},
{
"model": "fcr capsula",
"scope": "eq",
"trust": 0.6,
"vendor": "fujifilm",
"version": "x"
},
{
"model": "fcr xc-2 cr-ir",
"scope": "eq",
"trust": 0.3,
"vendor": "fujifilm",
"version": "357"
},
{
"model": "fcr carbon cr-ir",
"scope": "eq",
"trust": 0.3,
"vendor": "fujifilm",
"version": "x357"
},
{
"model": "fcr capsula cr-ir",
"scope": "eq",
"trust": 0.3,
"vendor": "fujifilm",
"version": "x357"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14247"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
},
{
"db": "NVD",
"id": "CVE-2019-10948"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:fujifilm:cr-ir_357_fcr_capsula_x_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:fujifilm:cr-ir_357_fcr_carbon_x_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:fujifilm:cr-ir_357_fcr_xc-2_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Marc Ruef and Rocco Gagliardi of Scip AG.,Marc Ruef and Rocco Gagliardi of Scip AG reported these vulnerabilities to NCCIC,Marc Ruef and Rocco Gagliardi of Scip AG reported these vulnerabilities to NCCIC.",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-1056"
}
],
"trust": 0.6
},
"cve": "CVE-2019-10948",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2019-10948",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2019-14247",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-142545",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2019-10948",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-10948",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2019-10948",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2019-14247",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201904-1056",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-142545",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2019-10948",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14247"
},
{
"db": "VULHUB",
"id": "VHN-142545"
},
{
"db": "VULMON",
"id": "CVE-2019-10948"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1056"
},
{
"db": "NVD",
"id": "CVE-2019-10948"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted. Fujifilm CR-IR357FCRCarbonX and others are all radioactive medical image reading devices of Fujifilm Corporation of Japan. A resource management error vulnerability exists in FujifilmCR-IR357FCRCarbonX, FCRXC-2, and FCRCapsulaX that could be exploited by an attacker to cause a denial of service. Fujifilm FCR Capsula X/Carbon X are prone to a denial-of-service vulnerability and an access-bypass vulnerability. \nAn attacker can exploit these issues to bypass certain security restrictions and perform unauthorized actions or cause a denial-of-service condition. This vulnerability stems from improper management of system resources (such as memory, disk space, files, etc.) by network systems or products",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-10948"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
},
{
"db": "CNVD",
"id": "CNVD-2019-14247"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "VULHUB",
"id": "VHN-142545"
},
{
"db": "VULMON",
"id": "CVE-2019-10948"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-10948",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSMA-19-113-01",
"trust": 3.5
},
{
"db": "BID",
"id": "108052",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004110",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1056",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2019-14247",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.1386",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-142545",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2019-10948",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14247"
},
{
"db": "VULHUB",
"id": "VHN-142545"
},
{
"db": "VULMON",
"id": "CVE-2019-10948"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1056"
},
{
"db": "NVD",
"id": "CVE-2019-10948"
}
]
},
"id": "VAR-201904-1018",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14247"
},
{
"db": "VULHUB",
"id": "VHN-142545"
}
],
"trust": 1.6444444333333332
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14247"
}
]
},
"last_update_date": "2024-11-23T22:55:37.279000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "FCR CAPSULA X",
"trust": 0.8,
"url": "https://www.fujifilm.com/products/medical/products/computed_radiography/capsula_x/"
},
{
"title": "FCR Carbon",
"trust": 0.8,
"url": "https://www.fujifilmusa.com/products/medical/digital-x-ray/cr-systems/fcr-carbon/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-400",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-142545"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
},
{
"db": "NVD",
"id": "CVE-2019-10948"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.6,
"url": "https://ics-cert.us-cert.gov/advisories/icsma-19-113-01"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-10948"
},
{
"trust": 0.9,
"url": "https://www.fujifilm.com/products/medical/products/computed_radiography/capsula_x/"
},
{
"trust": 0.9,
"url": "https://www.fujifilmusa.com/products/medical/digital-x-ray/cr-systems/fcr-carbon/"
},
{
"trust": 0.9,
"url": "https://www.fujifilm.com"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-10948"
},
{
"trust": 0.7,
"url": "https://www.securityfocus.com/bid/108052"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/79562"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/400.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14247"
},
{
"db": "VULHUB",
"id": "VHN-142545"
},
{
"db": "VULMON",
"id": "CVE-2019-10948"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1056"
},
{
"db": "NVD",
"id": "CVE-2019-10948"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-14247"
},
{
"db": "VULHUB",
"id": "VHN-142545"
},
{
"db": "VULMON",
"id": "CVE-2019-10948"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1056"
},
{
"db": "NVD",
"id": "CVE-2019-10948"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-14247"
},
{
"date": "2019-04-30T00:00:00",
"db": "VULHUB",
"id": "VHN-142545"
},
{
"date": "2019-04-30T00:00:00",
"db": "VULMON",
"id": "CVE-2019-10948"
},
{
"date": "2019-04-23T00:00:00",
"db": "BID",
"id": "108052"
},
{
"date": "2019-05-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-004110"
},
{
"date": "2019-04-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201904-1056"
},
{
"date": "2019-04-30T17:29:00.727000",
"db": "NVD",
"id": "CVE-2019-10948"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-14247"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-142545"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULMON",
"id": "CVE-2019-10948"
},
{
"date": "2019-04-23T00:00:00",
"db": "BID",
"id": "108052"
},
{
"date": "2019-05-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-004110"
},
{
"date": "2019-05-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201904-1056"
},
{
"date": "2024-11-21T04:20:12.843000",
"db": "NVD",
"id": "CVE-2019-10948"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-1056"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Fujifilm Product depletion vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-004110"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "resource management error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-1056"
}
],
"trust": 0.6
}
}
VAR-201904-1020
Vulnerability from variot - Updated: 2024-11-23 22:55Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system. Fujifilm CR-IR357FCRCarbonX and others are all radioactive medical image reading devices of Fujifilm Corporation of Japan. Fujifilm FCR Capsula X/Carbon X are prone to a denial-of-service vulnerability and an access-bypass vulnerability. An attacker can exploit these issues to bypass certain security restrictions and perform unauthorized actions or cause a denial-of-service condition. This vulnerability stems from the lack of authentication measures or insufficient authentication strength in network systems or products
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201904-1020",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "cr-ir 357 fcr xc-2",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr carbon x",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr capsula x",
"scope": "eq",
"trust": 1.0,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr capsula x",
"scope": null,
"trust": 0.8,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr carbon x",
"scope": null,
"trust": 0.8,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir 357 fcr xc-2",
"scope": null,
"trust": 0.8,
"vendor": "fujifilm",
"version": null
},
{
"model": "cr-ir fcr carbon",
"scope": "eq",
"trust": 0.6,
"vendor": "fujifilm",
"version": "357x"
},
{
"model": "fcr xc-2",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
},
{
"model": "fcr capsula",
"scope": "eq",
"trust": 0.6,
"vendor": "fujifilm",
"version": "x"
},
{
"model": "fcr xc-2 cr-ir",
"scope": "eq",
"trust": 0.3,
"vendor": "fujifilm",
"version": "357"
},
{
"model": "fcr carbon cr-ir",
"scope": "eq",
"trust": 0.3,
"vendor": "fujifilm",
"version": "x357"
},
{
"model": "fcr capsula cr-ir",
"scope": "eq",
"trust": 0.3,
"vendor": "fujifilm",
"version": "x357"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14246"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
},
{
"db": "NVD",
"id": "CVE-2019-10950"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:fujifilm:cr-ir_357_fcr_capsula_x_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:fujifilm:cr-ir_357_fcr_carbon_x_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:fujifilm:cr-ir_357_fcr_xc-2_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Marc Ruef and Rocco Gagliardi of Scip AG.,Marc Ruef and Rocco Gagliardi of Scip AG reported these vulnerabilities to NCCIC,Marc Ruef and Rocco Gagliardi of Scip AG reported these vulnerabilities to NCCIC.",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-1055"
}
],
"trust": 0.6
},
"cve": "CVE-2019-10950",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2019-10950",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2019-14246",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-142548",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-10950",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2019-10950",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-10950",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2019-10950",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2019-14246",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201904-1055",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-142548",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2019-10950",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14246"
},
{
"db": "VULHUB",
"id": "VHN-142548"
},
{
"db": "VULMON",
"id": "CVE-2019-10950"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1055"
},
{
"db": "NVD",
"id": "CVE-2019-10950"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system. Fujifilm CR-IR357FCRCarbonX and others are all radioactive medical image reading devices of Fujifilm Corporation of Japan. Fujifilm FCR Capsula X/Carbon X are prone to a denial-of-service vulnerability and an access-bypass vulnerability. \nAn attacker can exploit these issues to bypass certain security restrictions and perform unauthorized actions or cause a denial-of-service condition. This vulnerability stems from the lack of authentication measures or insufficient authentication strength in network systems or products",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-10950"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
},
{
"db": "CNVD",
"id": "CNVD-2019-14246"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "VULHUB",
"id": "VHN-142548"
},
{
"db": "VULMON",
"id": "CVE-2019-10950"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "ICS CERT",
"id": "ICSMA-19-113-01",
"trust": 3.5
},
{
"db": "NVD",
"id": "CVE-2019-10950",
"trust": 3.5
},
{
"db": "BID",
"id": "108052",
"trust": 2.1
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004111",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1055",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2019-14246",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.1386",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-142548",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2019-10950",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14246"
},
{
"db": "VULHUB",
"id": "VHN-142548"
},
{
"db": "VULMON",
"id": "CVE-2019-10950"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1055"
},
{
"db": "NVD",
"id": "CVE-2019-10950"
}
]
},
"id": "VAR-201904-1020",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14246"
},
{
"db": "VULHUB",
"id": "VHN-142548"
}
],
"trust": 1.6444444333333332
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14246"
}
]
},
"last_update_date": "2024-11-23T22:55:37.240000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "FCR CAPSULA X",
"trust": 0.8,
"url": "https://www.fujifilm.com/products/medical/products/computed_radiography/capsula_x/"
},
{
"title": "FCR Carbon",
"trust": 0.8,
"url": "https://www.fujifilmusa.com/products/medical/digital-x-ray/cr-systems/fcr-carbon/"
},
{
"title": "Threatpost",
"trust": 0.1,
"url": "https://threatpost.com/hackers-cashing-in-on-healthcare-industry-security-weaknesses/153238/"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2019-10950"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-306",
"trust": 1.1
},
{
"problemtype": "CWE-284",
"trust": 1.0
},
{
"problemtype": "CWE-287",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-142548"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
},
{
"db": "NVD",
"id": "CVE-2019-10950"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.6,
"url": "https://ics-cert.us-cert.gov/advisories/icsma-19-113-01"
},
{
"trust": 2.5,
"url": "http://www.securityfocus.com/bid/108052"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-10950"
},
{
"trust": 0.9,
"url": "https://www.fujifilm.com/products/medical/products/computed_radiography/capsula_x/"
},
{
"trust": 0.9,
"url": "https://www.fujifilmusa.com/products/medical/digital-x-ray/cr-systems/fcr-carbon/"
},
{
"trust": 0.9,
"url": "https://www.fujifilm.com"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-10950"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/79562"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/306.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://threatpost.com/hackers-cashing-in-on-healthcare-industry-security-weaknesses/153238/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-14246"
},
{
"db": "VULHUB",
"id": "VHN-142548"
},
{
"db": "VULMON",
"id": "CVE-2019-10950"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1055"
},
{
"db": "NVD",
"id": "CVE-2019-10950"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-14246"
},
{
"db": "VULHUB",
"id": "VHN-142548"
},
{
"db": "VULMON",
"id": "CVE-2019-10950"
},
{
"db": "BID",
"id": "108052"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-1055"
},
{
"db": "NVD",
"id": "CVE-2019-10950"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-14246"
},
{
"date": "2019-04-30T00:00:00",
"db": "VULHUB",
"id": "VHN-142548"
},
{
"date": "2019-04-30T00:00:00",
"db": "VULMON",
"id": "CVE-2019-10950"
},
{
"date": "2019-04-23T00:00:00",
"db": "BID",
"id": "108052"
},
{
"date": "2019-05-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-004111"
},
{
"date": "2019-04-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201904-1055"
},
{
"date": "2019-04-30T17:29:00.803000",
"db": "NVD",
"id": "CVE-2019-10950"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-14246"
},
{
"date": "2020-10-02T00:00:00",
"db": "VULHUB",
"id": "VHN-142548"
},
{
"date": "2020-10-02T00:00:00",
"db": "VULMON",
"id": "CVE-2019-10950"
},
{
"date": "2019-04-23T00:00:00",
"db": "BID",
"id": "108052"
},
{
"date": "2019-05-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-004111"
},
{
"date": "2020-10-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201904-1055"
},
{
"date": "2024-11-21T04:20:13.083000",
"db": "NVD",
"id": "CVE-2019-10950"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-1055"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Fujifilm Authentication vulnerabilities in products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-004111"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "access control error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-1055"
}
],
"trust": 0.6
}
}
VAR-202203-1326
Vulnerability from variot - Updated: 2024-11-23 22:36The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate. Rambus FIPS is a portable software encryption toolkit from Rambus that allows IoT device and platform manufacturers to deploy the security they need
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202203-1326",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "apeosport 3560",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport-vii c4473",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "docucentre-vii c3372",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "apeos c4570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "apeosport c3060",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport c3570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeos c328 df",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "202112062053"
},
{
"model": "apeosport 3060",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport-vii c2273",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "safezone basic crypto module",
"scope": "lt",
"trust": 1.0,
"vendor": "rambus",
"version": "10.4.0"
},
{
"model": "apeosport-vii c7788",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.1"
},
{
"model": "apeosport-vii c7773",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "docuprint 3508 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.57.5"
},
{
"model": "apeosport 3560 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport-vii cp4421",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "docucentre-vii c7773",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "apeos c6570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "apeospro c810",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.6"
},
{
"model": "apeosport 4570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosprint c325 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "202112062117"
},
{
"model": "apeos c4570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "apeosport-vii c5573",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "apeosport 3060 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport-vii p4021",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport c5570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport-vii c3372",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "apeosport 2560",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeos c325 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "202112062053"
},
{
"model": "apeosport c6570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport print c5570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "docuprint 3205 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.57.5"
},
{
"model": "docucentre-vii c5588",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.1"
},
{
"model": "apeos c7070",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "apeosport c2560",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport-vii c4421",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeos c328 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "202112062053"
},
{
"model": "apeosport-vii c6688",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.1"
},
{
"model": "docuprint 3208 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.57.5"
},
{
"model": "apeosport c4570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport 4570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport c5570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport-vii c6773",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "apeosport c2560 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeos c3070",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "apeos c3070 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "apeosport-vii 4021",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport c7070 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "docucentre-vii c6673",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "apeosport c7070",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport c4570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "docuprint c3555 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.57.6"
},
{
"model": "apeosport-vii 5021",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport 5570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport c3070",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport c6570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeos c325 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "202112062053"
},
{
"model": "apeosport 5570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosprint c328 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "202112062117"
},
{
"model": "apeosprint c328",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "202112062117"
},
{
"model": "primelink c9065",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.145.1"
},
{
"model": "apeosport c2060 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeosport-vii c5588",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.1"
},
{
"model": "apeosport c2060",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "primelink c9070",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.145.1"
},
{
"model": "apeosport-vii c3321",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeospro c750",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.6"
},
{
"model": "apeosport-vii c3373",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "apeospro c650",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.6"
},
{
"model": "apeosport c3070 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "docuprint c2555 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.57.6"
},
{
"model": "docucentre-vii c2273",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "docucentre-vii c3373",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "imagerunner",
"scope": "lte",
"trust": 1.0,
"vendor": "canon",
"version": "2020-03-14"
},
{
"model": "apeos c5570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "apeos c8180",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.6"
},
{
"model": "docuprint 4405 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.57.5"
},
{
"model": "docuprint 4408 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.57.5"
},
{
"model": "docucentre-vii c7788",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.1"
},
{
"model": "apeos c7070 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "imageprograf",
"scope": "lt",
"trust": 1.0,
"vendor": "canon",
"version": "2020-03-14"
},
{
"model": "safezone basic crypto module",
"scope": "gte",
"trust": 1.0,
"vendor": "rambus",
"version": "9.3.0"
},
{
"model": "apeos c5570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "apeos c7580",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.6"
},
{
"model": "docucentre-vii c5573",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "docucentre-vii c6688",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.1"
},
{
"model": "apeosport 2560 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "docuprint 3505 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.57.5"
},
{
"model": "apeosport c3570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.9"
},
{
"model": "apeos c6580",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.6"
},
{
"model": "apeos c6570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "docucentre-vii c4473",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.60.2"
},
{
"model": "apeos c3570",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
},
{
"model": "apeos c3570 g",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.1.7"
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2022-26320"
}
]
},
"cve": "CVE-2022-26320",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2022-26320",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.1,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-415478",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2022-26320",
"impactScore": 5.2,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2022-26320",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "CNNVD",
"id": "CNNVD-202203-1379",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-415478",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2022-26320",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-415478"
},
{
"db": "VULMON",
"id": "CVE-2022-26320"
},
{
"db": "CNNVD",
"id": "CNNVD-202203-1379"
},
{
"db": "NVD",
"id": "CVE-2022-26320"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat\u0027s factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate. Rambus FIPS is a portable software encryption toolkit from Rambus that allows IoT device and platform manufacturers to deploy the security they need",
"sources": [
{
"db": "NVD",
"id": "CVE-2022-26320"
},
{
"db": "CNNVD",
"id": "CNNVD-202203-1379"
},
{
"db": "VULHUB",
"id": "VHN-415478"
},
{
"db": "VULMON",
"id": "CVE-2022-26320"
}
],
"trust": 1.62
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2022-26320",
"trust": 1.8
},
{
"db": "CNNVD",
"id": "CNNVD-202203-1379",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-415478",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2022-26320",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-415478"
},
{
"db": "VULMON",
"id": "CVE-2022-26320"
},
{
"db": "CNNVD",
"id": "CNNVD-202203-1379"
},
{
"db": "NVD",
"id": "CVE-2022-26320"
}
]
},
"id": "VAR-202203-1326",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-415478"
}
],
"trust": 0.01
},
"last_update_date": "2024-11-23T22:36:52.390000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "",
"trust": 0.1,
"url": "https://github.com/google/paranoid_crypto "
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2022-26320"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-330",
"trust": 1.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-415478"
},
{
"db": "NVD",
"id": "CVE-2022-26320"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.8,
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.html"
},
{
"trust": 1.8,
"url": "https://fermatattack.secvuln.info"
},
{
"trust": 1.8,
"url": "https://global.canon/en/support/security/index.html"
},
{
"trust": 1.8,
"url": "https://safezoneswupdate.com"
},
{
"trust": 1.0,
"url": "https://www.rambus.com/security/response-center/advisories/rmbs-2021-01/"
},
{
"trust": 1.0,
"url": "https://web.archive.org/web/20220922042721/https://safezoneswupdate.com/"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2022-26320/"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/330.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://github.com/google/paranoid_crypto"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-415478"
},
{
"db": "VULMON",
"id": "CVE-2022-26320"
},
{
"db": "CNNVD",
"id": "CNNVD-202203-1379"
},
{
"db": "NVD",
"id": "CVE-2022-26320"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-415478"
},
{
"db": "VULMON",
"id": "CVE-2022-26320"
},
{
"db": "CNNVD",
"id": "CNNVD-202203-1379"
},
{
"db": "NVD",
"id": "CVE-2022-26320"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-03-14T00:00:00",
"db": "VULHUB",
"id": "VHN-415478"
},
{
"date": "2022-03-14T00:00:00",
"db": "VULMON",
"id": "CVE-2022-26320"
},
{
"date": "2022-03-14T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202203-1379"
},
{
"date": "2022-03-14T18:15:08.123000",
"db": "NVD",
"id": "CVE-2022-26320"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-03-23T00:00:00",
"db": "VULHUB",
"id": "VHN-415478"
},
{
"date": "2022-03-23T00:00:00",
"db": "VULMON",
"id": "CVE-2022-26320"
},
{
"date": "2022-03-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202203-1379"
},
{
"date": "2024-11-21T06:53:44.970000",
"db": "NVD",
"id": "CVE-2022-26320"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202203-1379"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Rambus FIPS Security feature vulnerability",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202203-1379"
}
],
"trust": 0.6
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "security feature problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202203-1379"
}
],
"trust": 0.6
}
}
VAR-202306-2258
Vulnerability from variot - Updated: 2024-08-14 14:30Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor. This vulnerability information was reported to the product developer by the person below, and the reporter and the product developer JPCERT/CC It was announced after coordination with Reporter : Darren Johnson MrThe product may cause denial of service by processing specially crafted requests. (DoS) can become a state
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202306-2258",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "hl-l2365dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "hl-l2361dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "docuprint p115 w",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.11"
},
{
"model": "dcp-j767n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-l8610cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "hl-1212wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "hl-l2315dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.24"
},
{
"model": "mfc-j5630cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "dcp-j582n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j485dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-l2720dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j2330dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j738dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "dcp-1610we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-1615nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "docuprint m115 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-j6535dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-1623we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-l2560dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "hl-l2365dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "dcp-j987n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "e"
},
{
"model": "docuprint m118 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-j5625dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "mfc-l2703dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j4725n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "h"
},
{
"model": "dcp-t710w\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-l2740dw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "hl-l8360cdwt",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j4625dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "u"
},
{
"model": "dcp-7180dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "hl-1212wvb",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j997d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "hl-1218w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j2320",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "dcp-j785dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "mfc-l2700dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-l2340dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.26"
},
{
"model": "mfc-1916nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-l2700dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-j4620dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "u"
},
{
"model": "hl-l8260cdn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.15"
},
{
"model": "docuprint p118 w",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "dcp-j987n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "e"
},
{
"model": "dcp-j4220n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-j830d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "dcp-1623wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j6530dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "dcp-j774dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-t510w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j3930dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-1616nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "mfc-j4320dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "mfc-t810w\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "fax-l2700dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "docuprint m115 w",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "dcp-1610wvb",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "hl-1222we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j572dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "n"
},
{
"model": "dcp-j973n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-1223we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j962n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-1915w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-j898n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-l9570cdw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "c"
},
{
"model": "docuprint m268 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-l2700dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-j2730dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "y"
},
{
"model": "hl-l2360dnr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-j5520dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "dcp-j978n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-l2707dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "dcp-l8410cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "dcp-l2520dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "hl-1210wvb",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j480dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j772dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-j567n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "hl-l8260cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.15"
},
{
"model": "mfc-j985dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j6580cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "mfc-j5330dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-l2720dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "hl-l8360cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "hl-1210wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j562n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-7880dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "mfc-j5720cdw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "j"
},
{
"model": "mfc-j3530dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j690dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "mfc-t910dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j577n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j738dwn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-t810w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "hl-1223wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-l2701dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "dcp-t510w\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-l9570cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "mfc-j6935dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "e-studio 301dn",
"scope": "eq",
"trust": 1.0,
"vendor": "toshibatec",
"version": null
},
{
"model": "mfc-j5730dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "y"
},
{
"model": "mfc-j837d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "docuprint m225 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "n"
},
{
"model": "docuprint m115 fw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-j998dwn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-j460dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-1912wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "hl-l2380dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j885dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "docuprint m225 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "n"
},
{
"model": "dcp-1612wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j887n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "dcp-l2540dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-l2366dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-j4420dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-j4225n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "h"
},
{
"model": "dcp-1610w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j6983cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "dcp-l2540dnr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-j572n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "hl-l2360dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-j6980cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "docuprint m265 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "n"
},
{
"model": "mfc-j5920dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "dcp-l2520dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j880dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j893n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j990d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-j5620cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "j"
},
{
"model": "docuprint m268 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-l2700dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-l2685dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-l2705dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "dcp-1610wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-1910w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-j880n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "hl-1210we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j4225n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "h"
},
{
"model": "dcp-j982n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-j491dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "docuprint m118 w",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "dcp-j972n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-j982n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-l2720dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-t710w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "docuprint p268 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.21"
},
{
"model": "docuprint p225 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.17"
},
{
"model": "dcp-j762n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j4720n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-j5930dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "y"
},
{
"model": "mfc-j5720dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "mfc-j730d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-j775dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j5620dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "mfc-1911w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-1910we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "dcp-j963n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j5335dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-l2740dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j497dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j895dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "mfc-l2700dnr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-j4220n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "dcp-j963n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j978n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-1212we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j6930dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j903n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "dcp-1612we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "hl-1211w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-l2540dw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "mfc-j5320dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-l8610cdw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "c"
},
{
"model": "dcp-j968n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j973n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-l2360dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-j890dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-1618w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j5830dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "y"
},
{
"model": "docuprint p265 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.21"
},
{
"model": "dcp-1612wvb",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j6730dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "dcp-j587n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "e"
},
{
"model": "mfc-j737d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-l8690cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "dcp-l2560dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "hl-1212w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j998dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-1919nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-1612w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-j562dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "dcp-j968n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "hl-1210w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "e-studio 302dnf",
"scope": "eq",
"trust": 1.0,
"vendor": "toshibatec",
"version": null
},
{
"model": "dcp-l2540dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-l2541dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-j2720",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "mfc-l2680w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-j981n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-1622we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-j983n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j4120dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-l9577cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "mfc-l8900cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "mfc-j680dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-j900d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "hl-2560dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-1911nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-j6583cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-j907d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "hl-l9310cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "docuprint p268 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.21"
},
{
"model": "hl-l2305w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.24"
},
{
"model": "mfc-l2740dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j5820dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-j6995cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "hl-l2340dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.26"
},
{
"model": "dcp-1617nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "debut\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc",
"scope": "eq",
"trust": 0.8,
"vendor": "\u30d6\u30e9\u30b6\u30fc\u5de5\u696d",
"version": null
},
{
"model": "debut\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc",
"scope": null,
"trust": 0.8,
"vendor": "\u30d6\u30e9\u30b6\u30fc\u5de5\u696d",
"version": null
},
{
"model": "debut\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc",
"scope": "eq",
"trust": 0.8,
"vendor": "\u30d6\u30e9\u30b6\u30fc\u5de5\u696d",
"version": "debut web server 1.20 or 1.30 specific models/models/ s of products that implement"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"cve": "CVE-2023-29984",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2023-29984",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "OTHER",
"availabilityImpact": "Low",
"baseScore": 5.3,
"baseSeverity": "Medium",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "JVNDB-2023-002270",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2023-29984",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "OTHER",
"id": "JVNDB-2023-002270",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-202306-2193",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor. This vulnerability information was reported to the product developer by the person below, and the reporter and the product developer JPCERT/CC It was announced after coordination with Reporter : Darren Johnson MrThe product may cause denial of service by processing specially crafted requests. (DoS) can become a state",
"sources": [
{
"db": "NVD",
"id": "CVE-2023-29984"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "VULMON",
"id": "CVE-2023-29984"
}
],
"trust": 1.71
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2023-29984",
"trust": 3.3
},
{
"db": "JVN",
"id": "JVNVU93767756",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270",
"trust": 1.4
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2023-29984",
"trust": 0.1
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"id": "VAR-202306-2258",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.95
},
"last_update_date": "2024-08-14T14:30:26.024000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Vulnerability in web browser setting function of our printer",
"trust": 0.8,
"url": "https://faq.brother.co.jp/app/answers/detail/a_id/13702"
},
{
"title": "Brother MFPs Security vulnerabilities",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=245514"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-476",
"trust": 1.0
},
{
"problemtype": "NULL Pointer dereference (CWE-476) [ others ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "https://jvn.jp/en/vu/jvnvu93767756/index.html"
},
{
"trust": 1.7,
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/browser_announce.html"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-29984"
},
{
"trust": 1.0,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100793_000"
},
{
"trust": 1.0,
"url": "https://support.brother.com/g/s/security/en/"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu93767756/index.html"
},
{
"trust": 0.7,
"url": "http://brother.com"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2023-29984/"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2023/jvndb-2023-002270.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-07-11T00:00:00",
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"date": "2023-06-30T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"date": "2023-06-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"date": "2023-07-11T20:15:10.700000",
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-07-12T00:00:00",
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"date": "2024-04-22T07:05:00",
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"date": "2023-07-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"date": "2023-11-07T04:11:39.737000",
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother \u00a0debut\u00a0 Multiple printers and MFPs implementing web servers \u00a0(MFP)\u00a0 In \u00a0NULL\u00a0 Pointer reference vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
}
],
"trust": 0.6
}
}
VAR-202107-1811
Vulnerability from variot - Updated: 2022-05-04 10:21Fujifilm has developed into one of the world's largest manufacturers and suppliers of comprehensive imaging, information, and document processing products and services.
Unauthorized access vulnerabilities exist in many Fujifilm printers. Attackers can use vulnerabilities to obtain sensitive information and perform unauthorized operations.
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202107-1811",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "docuprint m455 df",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
},
{
"model": "docucentre sc2020",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
},
{
"model": "docuprint cm315 z",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
},
{
"model": "phaser 6500n",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
},
{
"model": "phaser 6500dn",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
},
{
"model": "docuprint cp315 dw",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
},
{
"model": "docuprint m355 df",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
},
{
"model": "docuprint cp405 d",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-41637"
}
]
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2021-41637",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2021-41637",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-41637"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Fujifilm has developed into one of the world\u0027s largest manufacturers and suppliers of comprehensive imaging, information, and document processing products and services.\n\r\n\r\nUnauthorized access vulnerabilities exist in many Fujifilm printers. Attackers can use vulnerabilities to obtain sensitive information and perform unauthorized operations.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-41637"
}
],
"trust": 0.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2021-41637",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-41637"
}
]
},
"id": "VAR-202107-1811",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-41637"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-41637"
}
]
},
"last_update_date": "2022-05-04T10:21:11.433000Z",
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2021-41637"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-07-15T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-41637"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-06-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-41637"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unauthorized access vulnerabilities in multiple Fujifilm printers",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-41637"
}
],
"trust": 0.6
}
}
VAR-202108-2392
Vulnerability from variot - Updated: 2022-05-04 10:07Fujifilm was established on January 3, 1995. It is a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox (China) Co., Ltd. is headquartered in Beijing.
Fujifilm DocuPrint M355 df has an unauthorized access vulnerability. Attackers can use this vulnerability to gain unauthorized access to obtain sensitive information and perform unauthorized operations.
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202108-2392",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "docuprint m355 df",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46815"
}
]
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2021-46815",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2021-46815",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46815"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Fujifilm was established on January 3, 1995. It is a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox (China) Co., Ltd. is headquartered in Beijing.\n\r\n\r\nFujifilm DocuPrint M355 df has an unauthorized access vulnerability. Attackers can use this vulnerability to gain unauthorized access to obtain sensitive information and perform unauthorized operations.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46815"
}
],
"trust": 0.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2021-46815",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46815"
}
]
},
"id": "VAR-202108-2392",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46815"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"IoT"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46815"
}
]
},
"last_update_date": "2022-05-04T10:07:06.445000Z",
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2021-46815"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-08-05T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-46815"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-07-03T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-46815"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unauthorized access vulnerability exists in Fujifilm DocuPrint M355 df",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46815"
}
],
"trust": 0.6
}
}
VAR-202108-2383
Vulnerability from variot - Updated: 2022-05-04 10:03Fujifilm was established on January 3, 1995. It is a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox (China) Co., Ltd. is headquartered in Beijing.
Fujifilm DocuPrint CM305 df has an unauthorized access vulnerability. Attackers can use this vulnerability to gain unauthorized access to obtain sensitive information and perform unauthorized operations.
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202108-2383",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "docuprint cm305 df",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46814"
}
]
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2021-46814",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2021-46814",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46814"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Fujifilm was established on January 3, 1995. It is a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox (China) Co., Ltd. is headquartered in Beijing.\n\r\n\r\nFujifilm DocuPrint CM305 df has an unauthorized access vulnerability. Attackers can use this vulnerability to gain unauthorized access to obtain sensitive information and perform unauthorized operations.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46814"
}
],
"trust": 0.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2021-46814",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46814"
}
]
},
"id": "VAR-202108-2383",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46814"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"IoT"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46814"
}
]
},
"last_update_date": "2022-05-04T10:03:06.429000Z",
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2021-46814"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-08-05T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-46814"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-07-03T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-46814"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unauthorized access vulnerability exists in Fujifilm DocuPrint CM305 df series printers",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-46814"
}
],
"trust": 0.6
}
}
VAR-202108-2491
Vulnerability from variot - Updated: 2022-05-04 08:32DocuPrint CM305 df is a printer.
DocuPrint CM305 df has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202108-2491",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "docuprint cm305 df",
"scope": null,
"trust": 0.6,
"vendor": "fujifilm",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-45209"
}
]
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2021-45209",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2021-45209",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-45209"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "DocuPrint CM305 df is a printer.\n\r\n\r\nDocuPrint CM305 df has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-45209"
}
],
"trust": 0.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2021-45209",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-45209"
}
]
},
"id": "VAR-202108-2491",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-45209"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"IoT"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-45209"
}
]
},
"last_update_date": "2022-05-04T08:32:53.204000Z",
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2021-45209"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-08-02T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-45209"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2021-06-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2021-45209"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unauthorized access vulnerability exists in DocuPrint CM305 df",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2021-45209"
}
],
"trust": 0.6
}
}
CVE-2022-43460 (GCVE-0-2022-43460)
Vulnerability from nvd – Published: 2023-02-13 00:00 – Updated: 2025-03-21 18:34
VLAI
EPSS
VEX
Summary
Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator's credentials may be decrypted.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- Storing passwords in a recoverable format
- CWE-522 - Insufficiently Protected Credentials
Assigner
References
2 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FUJIFILM Business Innovation Corp. | Driver Distributor |
Affected:
v2.2.3.1 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T13:32:58.857Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN22830348/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2022-43460",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-21T18:33:49.667259Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "CWE-522 Insufficiently Protected Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-21T18:34:23.542Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Driver Distributor",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "v2.2.3.1 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator\u0027s credentials may be decrypted."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Storing passwords in a recoverable format",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-02-13T00:00:00.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html"
},
{
"url": "https://jvn.jp/en/jp/JVN22830348/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2022-43460",
"datePublished": "2023-02-13T00:00:00.000Z",
"dateReserved": "2022-12-09T00:00:00.000Z",
"dateUpdated": "2025-03-21T18:34:23.542Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2019-10950 (GCVE-0-2019-10950)
Vulnerability from nvd – Published: 2019-04-30 16:44 – Updated: 2024-08-04 22:40
VLAI
EPSS
VEX
Summary
Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system.
Severity
No CVSS data available.
CWE
- CWE-284 - IMPROPER ACCESS CONTROL CWE-284
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01 | x_refsource_MISC |
| http://www.securityfocus.com/bid/108052 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Fujifilm | Fujifilm FCR Capsula X/ Carbon X |
Affected:
CR-IR 357 FCR Carbon X
Affected: CR-IR 357 FCR XC-2 Affected: FCR-IR 357 FCR Capsula X |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T22:40:15.366Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
},
{
"name": "108052",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/108052"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Fujifilm FCR Capsula X/ Carbon X",
"vendor": "Fujifilm",
"versions": [
{
"status": "affected",
"version": "CR-IR 357 FCR Carbon X"
},
{
"status": "affected",
"version": "CR-IR 357 FCR XC-2"
},
{
"status": "affected",
"version": "FCR-IR 357 FCR Capsula X"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "IMPROPER ACCESS CONTROL CWE-284",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-04-30T16:44:44.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
},
{
"name": "108052",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/108052"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2019-10950",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Fujifilm FCR Capsula X/ Carbon X",
"version": {
"version_data": [
{
"version_value": "CR-IR 357 FCR Carbon X"
},
{
"version_value": "CR-IR 357 FCR XC-2"
},
{
"version_value": "FCR-IR 357 FCR Capsula X"
}
]
}
}
]
},
"vendor_name": "Fujifilm"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "IMPROPER ACCESS CONTROL CWE-284"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
},
{
"name": "108052",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/108052"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2019-10950",
"datePublished": "2019-04-30T16:44:35.000Z",
"dateReserved": "2019-04-08T00:00:00.000Z",
"dateUpdated": "2024-08-04T22:40:15.366Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2019-10948 (GCVE-0-2019-10948)
Vulnerability from nvd – Published: 2019-04-30 16:41 – Updated: 2024-08-04 22:40
VLAI
EPSS
VEX
Summary
Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted.
Severity
No CVSS data available.
CWE
- CWE-400 - UNCONTROLLED RESOURCE CONSUMPTION CWE-400
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Fujifilm | Fujifilm FCR Capsula X/ Carbon X |
Affected:
CR-IR 357 FCR Carbon X
Affected: CR-IR 357 FCR XC-2 Affected: FCR-IR 357 FCR Capsula X |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T22:40:15.443Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Fujifilm FCR Capsula X/ Carbon X",
"vendor": "Fujifilm",
"versions": [
{
"status": "affected",
"version": "CR-IR 357 FCR Carbon X"
},
{
"status": "affected",
"version": "CR-IR 357 FCR XC-2"
},
{
"status": "affected",
"version": "FCR-IR 357 FCR Capsula X"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "UNCONTROLLED RESOURCE CONSUMPTION CWE-400",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-04-30T16:41:37.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2019-10948",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Fujifilm FCR Capsula X/ Carbon X",
"version": {
"version_data": [
{
"version_value": "CR-IR 357 FCR Carbon X"
},
{
"version_value": "CR-IR 357 FCR XC-2"
},
{
"version_value": "FCR-IR 357 FCR Capsula X"
}
]
}
}
]
},
"vendor_name": "Fujifilm"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "UNCONTROLLED RESOURCE CONSUMPTION CWE-400"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2019-10948",
"datePublished": "2019-04-30T16:41:37.000Z",
"dateReserved": "2019-04-08T00:00:00.000Z",
"dateUpdated": "2024-08-04T22:40:15.443Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-10850 (GCVE-0-2017-10850)
Vulnerability from nvd – Published: 2017-09-01 14:00 – Updated: 2024-08-05 17:50
VLAI
EPSS
VEX
Summary
Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Severity
No CVSS data available.
CWE
- Untrusted search path vulnerability
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://jvn.jp/en/jp/JVN09769017/index.html | third-party-advisoryx_refsource_JVN |
| http://www.fujixerox.co.jp/company/news/notice/20… | x_refsource_CONFIRM |
Impacted products
10 products
Date Public
2017-08-31 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T17:50:12.585Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "JVN#09769017",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN09769017/index.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Installer of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 12 Apr 2017 02:04 UTC"
}
]
},
{
"product": "Installer of ART EX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 12 Apr 2017 02:04 UTC"
}
]
},
{
"product": "Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 12 Apr 2017 02:10 UTC"
}
]
},
{
"product": "Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 12 Apr 2017 02:10 UTC"
}
]
},
{
"product": "Installer of XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 3 Nov 2017 23:48 UTC"
}
]
},
{
"product": "Installer of XPS Print Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 3 Nov 2017 23:48 UTC"
}
]
},
{
"product": "Installer of ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 26 May 2017 07:44 UTC"
}
]
},
{
"product": "Installer of ART EX Direct FAX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 26 May 2017 07:44 UTC"
}
]
},
{
"product": "Installer of Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 25 Aug 2015 08:51 UTC"
}
]
},
{
"product": "Installer of Setting Restore Tool for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 25 Aug 2015 08:51 UTC"
}
]
}
],
"datePublic": "2017-08-31T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Untrusted search path vulnerability",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-01T13:57:01.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"name": "JVN#09769017",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "https://jvn.jp/en/jp/JVN09769017/index.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2017-10850",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Installer of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 12 Apr 2017 02:04 UTC"
}
]
}
},
{
"product_name": "Installer of ART EX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 12 Apr 2017 02:04 UTC"
}
]
}
},
{
"product_name": "Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 12 Apr 2017 02:10 UTC"
}
]
}
},
{
"product_name": "Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 12 Apr 2017 02:10 UTC"
}
]
}
},
{
"product_name": "Installer of XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 3 Nov 2017 23:48 UTC"
}
]
}
},
{
"product_name": "Installer of XPS Print Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 3 Nov 2017 23:48 UTC"
}
]
}
},
{
"product_name": "Installer of ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 26 May 2017 07:44 UTC"
}
]
}
},
{
"product_name": "Installer of ART EX Direct FAX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 26 May 2017 07:44 UTC"
}
]
}
},
{
"product_name": "Installer of Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 25 Aug 2015 08:51 UTC"
}
]
}
},
{
"product_name": "Installer of Setting Restore Tool for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 25 Aug 2015 08:51 UTC"
}
]
}
}
]
},
"vendor_name": "Fuji Xerox Co.,Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "JVN#09769017",
"refsource": "JVN",
"url": "https://jvn.jp/en/jp/JVN09769017/index.html"
},
{
"name": "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
"refsource": "CONFIRM",
"url": "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2017-10850",
"datePublished": "2017-09-01T14:00:00.000Z",
"dateReserved": "2017-07-04T00:00:00.000Z",
"dateUpdated": "2024-08-05T17:50:12.585Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-43460 (GCVE-0-2022-43460)
Vulnerability from cvelistv5 – Published: 2023-02-13 00:00 – Updated: 2025-03-21 18:34
VLAI
EPSS
VEX
Summary
Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator's credentials may be decrypted.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- Storing passwords in a recoverable format
- CWE-522 - Insufficiently Protected Credentials
Assigner
References
2 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FUJIFILM Business Innovation Corp. | Driver Distributor |
Affected:
v2.2.3.1 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T13:32:58.857Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN22830348/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2022-43460",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-21T18:33:49.667259Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "CWE-522 Insufficiently Protected Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-21T18:34:23.542Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Driver Distributor",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "v2.2.3.1 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator\u0027s credentials may be decrypted."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Storing passwords in a recoverable format",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-02-13T00:00:00.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html"
},
{
"url": "https://jvn.jp/en/jp/JVN22830348/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2022-43460",
"datePublished": "2023-02-13T00:00:00.000Z",
"dateReserved": "2022-12-09T00:00:00.000Z",
"dateUpdated": "2025-03-21T18:34:23.542Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2019-10950 (GCVE-0-2019-10950)
Vulnerability from cvelistv5 – Published: 2019-04-30 16:44 – Updated: 2024-08-04 22:40
VLAI
EPSS
VEX
Summary
Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system.
Severity
No CVSS data available.
CWE
- CWE-284 - IMPROPER ACCESS CONTROL CWE-284
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01 | x_refsource_MISC |
| http://www.securityfocus.com/bid/108052 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Fujifilm | Fujifilm FCR Capsula X/ Carbon X |
Affected:
CR-IR 357 FCR Carbon X
Affected: CR-IR 357 FCR XC-2 Affected: FCR-IR 357 FCR Capsula X |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T22:40:15.366Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
},
{
"name": "108052",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/108052"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Fujifilm FCR Capsula X/ Carbon X",
"vendor": "Fujifilm",
"versions": [
{
"status": "affected",
"version": "CR-IR 357 FCR Carbon X"
},
{
"status": "affected",
"version": "CR-IR 357 FCR XC-2"
},
{
"status": "affected",
"version": "FCR-IR 357 FCR Capsula X"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "IMPROPER ACCESS CONTROL CWE-284",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-04-30T16:44:44.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
},
{
"name": "108052",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/108052"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2019-10950",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Fujifilm FCR Capsula X/ Carbon X",
"version": {
"version_data": [
{
"version_value": "CR-IR 357 FCR Carbon X"
},
{
"version_value": "CR-IR 357 FCR XC-2"
},
{
"version_value": "FCR-IR 357 FCR Capsula X"
}
]
}
}
]
},
"vendor_name": "Fujifilm"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "IMPROPER ACCESS CONTROL CWE-284"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
},
{
"name": "108052",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/108052"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2019-10950",
"datePublished": "2019-04-30T16:44:35.000Z",
"dateReserved": "2019-04-08T00:00:00.000Z",
"dateUpdated": "2024-08-04T22:40:15.366Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2019-10948 (GCVE-0-2019-10948)
Vulnerability from cvelistv5 – Published: 2019-04-30 16:41 – Updated: 2024-08-04 22:40
VLAI
EPSS
VEX
Summary
Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted.
Severity
No CVSS data available.
CWE
- CWE-400 - UNCONTROLLED RESOURCE CONSUMPTION CWE-400
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01 | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Fujifilm | Fujifilm FCR Capsula X/ Carbon X |
Affected:
CR-IR 357 FCR Carbon X
Affected: CR-IR 357 FCR XC-2 Affected: FCR-IR 357 FCR Capsula X |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T22:40:15.443Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Fujifilm FCR Capsula X/ Carbon X",
"vendor": "Fujifilm",
"versions": [
{
"status": "affected",
"version": "CR-IR 357 FCR Carbon X"
},
{
"status": "affected",
"version": "CR-IR 357 FCR XC-2"
},
{
"status": "affected",
"version": "FCR-IR 357 FCR Capsula X"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "UNCONTROLLED RESOURCE CONSUMPTION CWE-400",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-04-30T16:41:37.000Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "ics-cert@hq.dhs.gov",
"ID": "CVE-2019-10948",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Fujifilm FCR Capsula X/ Carbon X",
"version": {
"version_data": [
{
"version_value": "CR-IR 357 FCR Carbon X"
},
{
"version_value": "CR-IR 357 FCR XC-2"
},
{
"version_value": "FCR-IR 357 FCR Capsula X"
}
]
}
}
]
},
"vendor_name": "Fujifilm"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "UNCONTROLLED RESOURCE CONSUMPTION CWE-400"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2019-10948",
"datePublished": "2019-04-30T16:41:37.000Z",
"dateReserved": "2019-04-08T00:00:00.000Z",
"dateUpdated": "2024-08-04T22:40:15.443Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-10850 (GCVE-0-2017-10850)
Vulnerability from cvelistv5 – Published: 2017-09-01 14:00 – Updated: 2024-08-05 17:50
VLAI
EPSS
VEX
Summary
Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Severity
No CVSS data available.
CWE
- Untrusted search path vulnerability
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://jvn.jp/en/jp/JVN09769017/index.html | third-party-advisoryx_refsource_JVN |
| http://www.fujixerox.co.jp/company/news/notice/20… | x_refsource_CONFIRM |
Impacted products
10 products
Date Public
2017-08-31 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T17:50:12.585Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "JVN#09769017",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN09769017/index.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Installer of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 12 Apr 2017 02:04 UTC"
}
]
},
{
"product": "Installer of ART EX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 12 Apr 2017 02:04 UTC"
}
]
},
{
"product": "Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 12 Apr 2017 02:10 UTC"
}
]
},
{
"product": "Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 12 Apr 2017 02:10 UTC"
}
]
},
{
"product": "Installer of XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 3 Nov 2017 23:48 UTC"
}
]
},
{
"product": "Installer of XPS Print Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 3 Nov 2017 23:48 UTC"
}
]
},
{
"product": "Installer of ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 26 May 2017 07:44 UTC"
}
]
},
{
"product": "Installer of ART EX Direct FAX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 26 May 2017 07:44 UTC"
}
]
},
{
"product": "Installer of Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 25 Aug 2015 08:51 UTC"
}
]
},
{
"product": "Installer of Setting Restore Tool for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"vendor": "Fuji Xerox Co.,Ltd.",
"versions": [
{
"status": "affected",
"version": "Timestamp of code signing is before 25 Aug 2015 08:51 UTC"
}
]
}
],
"datePublic": "2017-08-31T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Untrusted search path vulnerability",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-01T13:57:01.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"name": "JVN#09769017",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "https://jvn.jp/en/jp/JVN09769017/index.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2017-10850",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Installer of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 12 Apr 2017 02:04 UTC"
}
]
}
},
{
"product_name": "Installer of ART EX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 12 Apr 2017 02:04 UTC"
}
]
}
},
{
"product_name": "Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 12 Apr 2017 02:10 UTC"
}
]
}
},
{
"product_name": "Installer of PostScript? Driver + Additional Feature Plug-in + PPD File for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 12 Apr 2017 02:10 UTC"
}
]
}
},
{
"product_name": "Installer of XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 3 Nov 2017 23:48 UTC"
}
]
}
},
{
"product_name": "Installer of XPS Print Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 3 Nov 2017 23:48 UTC"
}
]
}
},
{
"product_name": "Installer of ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 26 May 2017 07:44 UTC"
}
]
}
},
{
"product_name": "Installer of ART EX Direct FAX Driver for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 26 May 2017 07:44 UTC"
}
]
}
},
{
"product_name": "Installer of Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 25 Aug 2015 08:51 UTC"
}
]
}
},
{
"product_name": "Installer of Setting Restore Tool for DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271",
"version": {
"version_data": [
{
"version_value": "Timestamp of code signing is before 25 Aug 2015 08:51 UTC"
}
]
}
}
]
},
"vendor_name": "Fuji Xerox Co.,Ltd."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "JVN#09769017",
"refsource": "JVN",
"url": "https://jvn.jp/en/jp/JVN09769017/index.html"
},
{
"name": "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html",
"refsource": "CONFIRM",
"url": "http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2017-10850",
"datePublished": "2017-09-01T14:00:00.000Z",
"dateReserved": "2017-07-04T00:00:00.000Z",
"dateUpdated": "2024-08-05T17:50:12.585Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}