Search
Find a vulnerability
Search criteria
14 vulnerabilities by Fujifilm Business Innovation Corp.
CVE-2026-78249 (GCVE-0-2026-78249)
Vulnerability from nvd – Published: 2026-10-01 07:56 – Updated: 2026-10-01 15:30
VLAI
EPSS
VEX
Summary
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters.
If the device receives a specially crafted, malicious request, it may trigger unintended processing.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:30 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
2 references
Impacted products
69 products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-78249",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:30:34.746566Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:30:58.749Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Apeos 3060 / 2560 / 1860 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3061 / 2561 / 2061 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.0.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 4570 / 3570 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5330 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 6340 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 7580 / 6580 / 5580 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C2360 / C2060 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3061 / C2561 / C2061 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.103 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3567 / C3067 / C2567 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C4030/C3530 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C5240 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C8180 / C7580 / C6580 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 4560 S / 3960 S / 3360 S Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 4830 / 4830 JM Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 6340 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C3560 S / C3060 S Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.20.105 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C4030 / C3530 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C5240 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C5570 / C4570 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPro C810 / C750 / C650 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press E1136 / E1125/ E1110 / E1100 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press E1136P/E1125P/E1110P Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC1100 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.22.11 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC2100S / EC2100 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press SC285S / SC285 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.0 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RevoriaPress SC180 / SC170 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.23.6 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3560 / 3060 / 2560 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3561 / 3061 / 2561 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.0.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5330 / 4830 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5570 / 4570 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 6340 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 7580 / 6580 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3060 / C2560 / C2060 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3061 / C2561 / C2061 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.103 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3567 / C3067 / C2567 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C4030/C3530 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C5240 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C8180 / C7580 / C6580 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 4560 S / 3960 S / 3360 S Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 5330 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 6340 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C4030 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C5240 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C5570 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPro C810 / C750 / C650 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press E1136 / E1125/ E1110 / E1100 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC1100 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.22.11 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC2100S / EC2100 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press SC285S / SC285 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.0 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RevoriaPress SC180 / SC170 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.23.6 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3561 / 3061 / 2561 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.0.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5330/4830 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5570/4570 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3060 / C2560 / C2060 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3560 / 3060 / 2560 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C4030/C3530 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 5330/4830 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C4030/C3530 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPro C810 / C750 / C650 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press E1136 / E1125 / E1110 /E1100 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC1100 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.1.6 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC2100S / EC2100 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.1.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press SC285S / SC285 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.1.0 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RevoriaPress SC180 / SC170 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.1.4 or earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003eA path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. \n\u003cbr\u003eIf the device receives a specially crafted, malicious request, it may trigger unintended processing.\u0026nbsp;\u003c/div\u003e"
}
],
"value": "A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. \n\nIf the device receives a specially crafted, malicious request, it may trigger unintended processing."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T07:56:26.289Z",
"orgId": "47e4fddc-a2f1-48a0-beab-943c84c1c954",
"shortName": "FB"
},
"references": [
{
"url": "https://www.fujifilm.com/fb/en/news/15736e"
},
{
"url": "https://global.sharp/corporate/info/product-security/advisory-list/2026-006/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "47e4fddc-a2f1-48a0-beab-943c84c1c954",
"assignerShortName": "FB",
"cveId": "CVE-2026-78249",
"datePublished": "2026-10-01T07:56:26.289Z",
"dateReserved": "2026-08-24T05:49:42.521Z",
"dateUpdated": "2026-10-01T15:30:58.749Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-21408 (GCVE-0-2026-21408)
Vulnerability from nvd – Published: 2026-01-27 05:08 – Updated: 2026-01-27 20:50
VLAI
EPSS
VEX
Summary
beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with SYSTEM privileges.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-27 20:50 UTC
CWE
- CWE-427 - Uncontrolled Search Path Element
Assigner
References
2 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FUJIFILM Business Innovation Corp. | beat-access for Windows |
Affected:
version 3.0.3 and prior
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-21408",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-27T20:50:01.275607Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-27T20:50:14.682Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "beat-access for Windows",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "version 3.0.3 and prior"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with SYSTEM privileges."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-427",
"description": "Uncontrolled Search Path Element",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-27T05:08:20.229Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2026/0127_announce.html"
},
{
"url": "https://jvn.jp/en/jp/JVN03776126/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-21408",
"datePublished": "2026-01-27T05:08:20.229Z",
"dateReserved": "2026-01-19T06:37:18.443Z",
"dateUpdated": "2026-01-27T20:50:14.682Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-48499 (GCVE-0-2025-48499)
Vulnerability from nvd – Published: 2025-08-04 05:17 – Updated: 2025-08-07 16:05
VLAI
EPSS
VEX
Summary
Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printing Protocol) or LPD (Line Printer Daemon) packet may cause a denial-of-service (DoS) condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service (DoS) condition.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-08-04 16:39 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
2 references
Impacted products
14 products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-48499",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-04T16:39:52.400612Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-07T16:05:44.214Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DocuPrint CP225 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.23.02 and earlier"
}
]
},
{
"product": "DocuPrint CP228 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.23.02 and earlier"
}
]
},
{
"product": "DocuPrint CP115 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.00 and earlier"
}
]
},
{
"product": "DocuPrint CP118 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.00 and earlier"
}
]
},
{
"product": "DocuPrint CP116 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.00 and earlier"
}
]
},
{
"product": "DocuPrint CP119 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.00 and earlier"
}
]
},
{
"product": "DocuPrint CM225 fw",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.12.02 and earlier"
}
]
},
{
"product": "DocuPrint CM228 fw",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.12.02 and earlier"
}
]
},
{
"product": "DocuPrint CM115 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.01 and earlier"
}
]
},
{
"product": "DocuPrint CM118 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.01 and earlier"
}
]
},
{
"product": "Apoes 2150 N",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.00.47 and earlier"
}
]
},
{
"product": "Apoes 2350 NDA",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.00.47 and earlier"
}
]
},
{
"product": "Apoes 2150 ND",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.00.47 and earlier"
}
]
},
{
"product": "Apoes 2150 NDA",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.00.47 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printing Protocol) or LPD (Line Printer Daemon) packet may cause a denial-of-service (DoS) condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service (DoS) condition."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-04T05:17:01.537Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0804_announce.html"
},
{
"url": "https://jvn.jp/en/vu/JVNVU93897456/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2025-48499",
"datePublished": "2025-08-04T05:17:01.537Z",
"dateReserved": "2025-07-14T05:09:53.900Z",
"dateUpdated": "2025-08-07T16:05:44.214Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-45320 (GCVE-0-2024-45320)
Vulnerability from nvd – Published: 2025-02-18 05:20 – Updated: 2025-02-18 14:58
VLAI
EPSS
VEX
Summary
Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-18 14:58 UTC
CWE
- CWE-787 - Out-of-bounds write
Assigner
References
2 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| FUJIFILM Business Innovation Corp. | DocuPrint CP225w |
Affected:
01.22.01 and earlier
|
|
| FUJIFILM Business Innovation Corp. | DocuPrint CP228w |
Affected:
01.22.01 and earlier
|
|
| FUJIFILM Business Innovation Corp. | DocuPrint CM225fw |
Affected:
01.10.01 and earlier
|
|
| FUJIFILM Business Innovation Corp. | DocuPrint CM228fw |
Affected:
01.10.01 and earlier
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-45320",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-18T14:58:39.290272Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-18T14:58:44.985Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DocuPrint CP225w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.22.01 and earlier"
}
]
},
{
"product": "DocuPrint CP228w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.22.01 and earlier"
}
]
},
{
"product": "DocuPrint CM225fw",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.10.01 and earlier"
}
]
},
{
"product": "DocuPrint CM228fw",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.10.01 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds write",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-18T05:20:23.570Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0217_announce.html"
},
{
"url": "https://jvn.jp/en/vu/JVNVU96297631/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-45320",
"datePublished": "2025-02-18T05:20:23.570Z",
"dateReserved": "2024-08-27T01:52:28.658Z",
"dateUpdated": "2025-02-18T14:58:44.985Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-22475 (GCVE-0-2024-22475)
Vulnerability from nvd – Published: 2024-03-18 08:03 – Updated: 2024-10-27 21:26
VLAI
EPSS
VEX
Summary
Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. allows a remote unauthenticated attacker to perform unintended operations on the affected product. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Severity
6.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-17 18:18 UTC
CWE
- Cross-site request forgery (CSRF)
- CWE-352 - Cross-Site Request Forgery (CSRF)
Assigner
References
6 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| BROTHER INDUSTRIES, LTD. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| FUJIFILM Business Innovation Corp. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| Toshiba Tec Corporation | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| RICOH COMPANY, LTD. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-22475",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-17T18:18:38.595032Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "CWE-352 Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-27T21:26:34.557Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T22:51:09.846Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faqp00100601_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1\u0026faqid=faq00100823_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.toshibatec.com/information/20240306_01.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN82749078/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Multiple printers and scanners",
"vendor": "BROTHER INDUSTRIES, LTD.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "Toshiba Tec Corporation",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "RICOH COMPANY, LTD.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. allows a remote unauthenticated attacker to perform unintended operations on the affected product. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-site request forgery (CSRF)",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-18T08:03:36.146Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faqp00100601_000"
},
{
"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1\u0026faqid=faq00100823_000"
},
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html"
},
{
"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002"
},
{
"url": "https://www.toshibatec.com/information/20240306_01.html"
},
{
"url": "https://jvn.jp/en/jp/JVN82749078/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-22475",
"datePublished": "2024-03-18T08:03:36.146Z",
"dateReserved": "2024-02-09T04:42:38.473Z",
"dateUpdated": "2024-10-27T21:26:34.557Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-21824 (GCVE-0-2024-21824)
Vulnerability from nvd – Published: 2024-03-18 08:01 – Updated: 2024-11-07 15:26
VLAI
EPSS
VEX
Summary
Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-17 18:20 UTC
CWE
- Improper authentication
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
6 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| BROTHER INDUSTRIES, LTD. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| FUJIFILM Business Innovation Corp. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| Toshiba Tec Corporation | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| RICOH COMPANY, LTD. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-21824",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-17T18:20:15.364083Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-07T15:26:23.509Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T22:27:36.289Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faqp00100601_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1\u0026faqid=faq00100823_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.toshibatec.com/information/20240306_01.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN82749078/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Multiple printers and scanners",
"vendor": "BROTHER INDUSTRIES, LTD.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "Toshiba Tec Corporation",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "RICOH COMPANY, LTD.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Improper authentication",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-18T08:01:57.734Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faqp00100601_000"
},
{
"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1\u0026faqid=faq00100823_000"
},
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html"
},
{
"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002"
},
{
"url": "https://www.toshibatec.com/information/20240306_01.html"
},
{
"url": "https://jvn.jp/en/jp/JVN82749078/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-21824",
"datePublished": "2024-03-18T08:01:57.734Z",
"dateReserved": "2024-02-09T04:42:37.389Z",
"dateUpdated": "2024-11-07T15:26:23.509Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-43460 (GCVE-0-2022-43460)
Vulnerability from nvd – Published: 2023-02-13 00:00 – Updated: 2025-03-21 18:34
VLAI
EPSS
VEX
Summary
Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator's credentials may be decrypted.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-03-21 18:33 UTC
CWE
- Storing passwords in a recoverable format
- CWE-522 - Insufficiently Protected Credentials
Assigner
References
2 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FUJIFILM Business Innovation Corp. | Driver Distributor |
Affected:
v2.2.3.1 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T13:32:58.857Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN22830348/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2022-43460",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-21T18:33:49.667259Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "CWE-522 Insufficiently Protected Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-21T18:34:23.542Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Driver Distributor",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "v2.2.3.1 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator\u0027s credentials may be decrypted."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Storing passwords in a recoverable format",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-02-13T00:00:00.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html"
},
{
"url": "https://jvn.jp/en/jp/JVN22830348/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2022-43460",
"datePublished": "2023-02-13T00:00:00.000Z",
"dateReserved": "2022-12-09T00:00:00.000Z",
"dateUpdated": "2025-03-21T18:34:23.542Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-78249 (GCVE-0-2026-78249)
Vulnerability from cvelistv5 – Published: 2026-10-01 07:56 – Updated: 2026-10-01 15:30
VLAI
EPSS
VEX
Summary
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters.
If the device receives a specially crafted, malicious request, it may trigger unintended processing.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 15:30 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
2 references
Impacted products
69 products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-78249",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T15:30:34.746566Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T15:30:58.749Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Apeos 3060 / 2560 / 1860 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3061 / 2561 / 2061 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.0.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 4570 / 3570 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5330 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 6340 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 7580 / 6580 / 5580 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C2360 / C2060 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3061 / C2561 / C2061 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.103 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3567 / C3067 / C2567 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C4030/C3530 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C5240 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C8180 / C7580 / C6580 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 4560 S / 3960 S / 3360 S Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 4830 / 4830 JM Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 6340 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C3560 S / C3060 S Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.20.105 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C4030 / C3530 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C5240 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C5570 / C4570 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPro C810 / C750 / C650 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press E1136 / E1125/ E1110 / E1100 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press E1136P/E1125P/E1110P Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC1100 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.22.11 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC2100S / EC2100 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press SC285S / SC285 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.0 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RevoriaPress SC180 / SC170 Japan model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.23.6 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3560 / 3060 / 2560 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3561 / 3061 / 2561 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.0.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5330 / 4830 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5570 / 4570 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 6340 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 7580 / 6580 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3060 / C2560 / C2060 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3061 / C2561 / C2061 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.103 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3567 / C3067 / C2567 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C4030/C3530 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C5240 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 / C2570 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7071 / C6571 / C5571 / C4571 / C3571 / C3071 / C2571 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C8180 / C7580 / C6580 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 4560 S / 3960 S / 3360 S Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 5330 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 6340 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C4030 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C5240 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C5570 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPro C810 / C750 / C650 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press E1136 / E1125/ E1110 / E1100 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC1100 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.22.11 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC2100S / EC2100 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press SC285S / SC285 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.1.0 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RevoriaPress SC180 / SC170 Asia Pacific model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.23.6 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3561 / 3061 / 2561 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "1.0.3 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5330/4830 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 5570/4570 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C3060 / C2560 / C2060 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos 3560 / 3060 / 2560 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C4030/C3530 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Apeos C7070 / C6570 / C5570 / C4570 / C3570 / C3070 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint 5330/4830 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPrint C4030/C3530 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ApeosPro C810 / C750 / C650 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press E1136 / E1125 / E1110 /E1100 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.50.5 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC1100 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.1.6 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press EC2100S / EC2100 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.1.4 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Revoria Press SC285S / SC285 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.1.0 or earlier"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RevoriaPress SC180 / SC170 Europe model",
"vendor": "Fujifilm Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "21.1.4 or earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003eA path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. \n\u003cbr\u003eIf the device receives a specially crafted, malicious request, it may trigger unintended processing.\u0026nbsp;\u003c/div\u003e"
}
],
"value": "A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. \n\nIf the device receives a specially crafted, malicious request, it may trigger unintended processing."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T07:56:26.289Z",
"orgId": "47e4fddc-a2f1-48a0-beab-943c84c1c954",
"shortName": "FB"
},
"references": [
{
"url": "https://www.fujifilm.com/fb/en/news/15736e"
},
{
"url": "https://global.sharp/corporate/info/product-security/advisory-list/2026-006/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "47e4fddc-a2f1-48a0-beab-943c84c1c954",
"assignerShortName": "FB",
"cveId": "CVE-2026-78249",
"datePublished": "2026-10-01T07:56:26.289Z",
"dateReserved": "2026-08-24T05:49:42.521Z",
"dateUpdated": "2026-10-01T15:30:58.749Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-21408 (GCVE-0-2026-21408)
Vulnerability from cvelistv5 – Published: 2026-01-27 05:08 – Updated: 2026-01-27 20:50
VLAI
EPSS
VEX
Summary
beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with SYSTEM privileges.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-27 20:50 UTC
CWE
- CWE-427 - Uncontrolled Search Path Element
Assigner
References
2 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FUJIFILM Business Innovation Corp. | beat-access for Windows |
Affected:
version 3.0.3 and prior
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-21408",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-27T20:50:01.275607Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-27T20:50:14.682Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "beat-access for Windows",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "version 3.0.3 and prior"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with SYSTEM privileges."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-427",
"description": "Uncontrolled Search Path Element",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-27T05:08:20.229Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2026/0127_announce.html"
},
{
"url": "https://jvn.jp/en/jp/JVN03776126/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-21408",
"datePublished": "2026-01-27T05:08:20.229Z",
"dateReserved": "2026-01-19T06:37:18.443Z",
"dateUpdated": "2026-01-27T20:50:14.682Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-48499 (GCVE-0-2025-48499)
Vulnerability from cvelistv5 – Published: 2025-08-04 05:17 – Updated: 2025-08-07 16:05
VLAI
EPSS
VEX
Summary
Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printing Protocol) or LPD (Line Printer Daemon) packet may cause a denial-of-service (DoS) condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service (DoS) condition.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-08-04 16:39 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
2 references
Impacted products
14 products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-48499",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-04T16:39:52.400612Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-07T16:05:44.214Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DocuPrint CP225 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.23.02 and earlier"
}
]
},
{
"product": "DocuPrint CP228 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.23.02 and earlier"
}
]
},
{
"product": "DocuPrint CP115 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.00 and earlier"
}
]
},
{
"product": "DocuPrint CP118 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.00 and earlier"
}
]
},
{
"product": "DocuPrint CP116 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.00 and earlier"
}
]
},
{
"product": "DocuPrint CP119 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.00 and earlier"
}
]
},
{
"product": "DocuPrint CM225 fw",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.12.02 and earlier"
}
]
},
{
"product": "DocuPrint CM228 fw",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.12.02 and earlier"
}
]
},
{
"product": "DocuPrint CM115 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.01 and earlier"
}
]
},
{
"product": "DocuPrint CM118 w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.09.01 and earlier"
}
]
},
{
"product": "Apoes 2150 N",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.00.47 and earlier"
}
]
},
{
"product": "Apoes 2350 NDA",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.00.47 and earlier"
}
]
},
{
"product": "Apoes 2150 ND",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.00.47 and earlier"
}
]
},
{
"product": "Apoes 2150 NDA",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.00.47 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printing Protocol) or LPD (Line Printer Daemon) packet may cause a denial-of-service (DoS) condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service (DoS) condition."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-04T05:17:01.537Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0804_announce.html"
},
{
"url": "https://jvn.jp/en/vu/JVNVU93897456/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2025-48499",
"datePublished": "2025-08-04T05:17:01.537Z",
"dateReserved": "2025-07-14T05:09:53.900Z",
"dateUpdated": "2025-08-07T16:05:44.214Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-45320 (GCVE-0-2024-45320)
Vulnerability from cvelistv5 – Published: 2025-02-18 05:20 – Updated: 2025-02-18 14:58
VLAI
EPSS
VEX
Summary
Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-18 14:58 UTC
CWE
- CWE-787 - Out-of-bounds write
Assigner
References
2 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| FUJIFILM Business Innovation Corp. | DocuPrint CP225w |
Affected:
01.22.01 and earlier
|
|
| FUJIFILM Business Innovation Corp. | DocuPrint CP228w |
Affected:
01.22.01 and earlier
|
|
| FUJIFILM Business Innovation Corp. | DocuPrint CM225fw |
Affected:
01.10.01 and earlier
|
|
| FUJIFILM Business Innovation Corp. | DocuPrint CM228fw |
Affected:
01.10.01 and earlier
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-45320",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-18T14:58:39.290272Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-18T14:58:44.985Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DocuPrint CP225w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.22.01 and earlier"
}
]
},
{
"product": "DocuPrint CP228w",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.22.01 and earlier"
}
]
},
{
"product": "DocuPrint CM225fw",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.10.01 and earlier"
}
]
},
{
"product": "DocuPrint CM228fw",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "01.10.01 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds write",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-18T05:20:23.570Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0217_announce.html"
},
{
"url": "https://jvn.jp/en/vu/JVNVU96297631/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-45320",
"datePublished": "2025-02-18T05:20:23.570Z",
"dateReserved": "2024-08-27T01:52:28.658Z",
"dateUpdated": "2025-02-18T14:58:44.985Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-22475 (GCVE-0-2024-22475)
Vulnerability from cvelistv5 – Published: 2024-03-18 08:03 – Updated: 2024-10-27 21:26
VLAI
EPSS
VEX
Summary
Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. allows a remote unauthenticated attacker to perform unintended operations on the affected product. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Severity
6.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-17 18:18 UTC
CWE
- Cross-site request forgery (CSRF)
- CWE-352 - Cross-Site Request Forgery (CSRF)
Assigner
References
6 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| BROTHER INDUSTRIES, LTD. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| FUJIFILM Business Innovation Corp. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| Toshiba Tec Corporation | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| RICOH COMPANY, LTD. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-22475",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-17T18:18:38.595032Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "CWE-352 Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-27T21:26:34.557Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T22:51:09.846Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faqp00100601_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1\u0026faqid=faq00100823_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.toshibatec.com/information/20240306_01.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN82749078/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Multiple printers and scanners",
"vendor": "BROTHER INDUSTRIES, LTD.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "Toshiba Tec Corporation",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "RICOH COMPANY, LTD.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. allows a remote unauthenticated attacker to perform unintended operations on the affected product. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-site request forgery (CSRF)",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-18T08:03:36.146Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faqp00100601_000"
},
{
"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1\u0026faqid=faq00100823_000"
},
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html"
},
{
"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002"
},
{
"url": "https://www.toshibatec.com/information/20240306_01.html"
},
{
"url": "https://jvn.jp/en/jp/JVN82749078/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-22475",
"datePublished": "2024-03-18T08:03:36.146Z",
"dateReserved": "2024-02-09T04:42:38.473Z",
"dateUpdated": "2024-10-27T21:26:34.557Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-21824 (GCVE-0-2024-21824)
Vulnerability from cvelistv5 – Published: 2024-03-18 08:01 – Updated: 2024-11-07 15:26
VLAI
EPSS
VEX
Summary
Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-17 18:20 UTC
CWE
- Improper authentication
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
6 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| BROTHER INDUSTRIES, LTD. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| FUJIFILM Business Innovation Corp. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| Toshiba Tec Corporation | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
|
| RICOH COMPANY, LTD. | Multiple printers and scanners |
Affected:
see the information provided by the vendor
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-21824",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-17T18:20:15.364083Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-07T15:26:23.509Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T22:27:36.289Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faqp00100601_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1\u0026faqid=faq00100823_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.toshibatec.com/information/20240306_01.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN82749078/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Multiple printers and scanners",
"vendor": "BROTHER INDUSTRIES, LTD.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "Toshiba Tec Corporation",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
},
{
"product": "Multiple printers and scanners",
"vendor": "RICOH COMPANY, LTD.",
"versions": [
{
"status": "affected",
"version": "see the information provided by the vendor"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Improper authentication",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-18T08:01:57.734Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faqp00100601_000"
},
{
"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1\u0026faqid=faq00100823_000"
},
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html"
},
{
"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002"
},
{
"url": "https://www.toshibatec.com/information/20240306_01.html"
},
{
"url": "https://jvn.jp/en/jp/JVN82749078/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-21824",
"datePublished": "2024-03-18T08:01:57.734Z",
"dateReserved": "2024-02-09T04:42:37.389Z",
"dateUpdated": "2024-11-07T15:26:23.509Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-43460 (GCVE-0-2022-43460)
Vulnerability from cvelistv5 – Published: 2023-02-13 00:00 – Updated: 2025-03-21 18:34
VLAI
EPSS
VEX
Summary
Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator's credentials may be decrypted.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-03-21 18:33 UTC
CWE
- Storing passwords in a recoverable format
- CWE-522 - Insufficiently Protected Credentials
Assigner
References
2 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FUJIFILM Business Innovation Corp. | Driver Distributor |
Affected:
v2.2.3.1 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T13:32:58.857Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN22830348/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2022-43460",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-21T18:33:49.667259Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "CWE-522 Insufficiently Protected Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-21T18:34:23.542Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Driver Distributor",
"vendor": "FUJIFILM Business Innovation Corp.",
"versions": [
{
"status": "affected",
"version": "v2.2.3.1 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator\u0027s credentials may be decrypted."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Storing passwords in a recoverable format",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-02-13T00:00:00.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/0131_announce.html"
},
{
"url": "https://jvn.jp/en/jp/JVN22830348/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2022-43460",
"datePublished": "2023-02-13T00:00:00.000Z",
"dateReserved": "2022-12-09T00:00:00.000Z",
"dateUpdated": "2025-03-21T18:34:23.542Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}