CVE-2023-46327

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-287

Affected software

VendorProductVersions
FUJIFILM Business Inovation Corp.Apeos C3070 Asia Pacific Model1.0.0 to 1.3.7; 1.21.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C3570 Asia Pacific Model1.0.0 to 1.3.7; 1.21.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C4570 Asia Pacific Model1.0.0 to 1.3.7; 1.21.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C2060 Japan Model1.0.0 to 1.2.14; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10
FUJIFILM Business Inovation Corp.Apeos C2360 Japan Model1.0.0 to 1.2.14; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10
FUJIFILM Business Inovation Corp.Apeos C2570 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C3070 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C3570 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C4570 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C5570 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C6570 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C7070 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11
FUJIFILM Business Inovation Corp.Apeos C6580 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp.Apeos C7580 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp.Apeos C8180 Japan Model1.0.0 to 1.3.7; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp.Apeos C3530 Japan Model1.0.0 to 1.20.9
FUJIFILM Business Inovation Corp.Apeos C4030 Japan Model1.0.0 to 1.20.9
FUJIFILM Business Inovation Corp.Apeos C5240 Japan Model1.0.0 to 1.2.12; 1.20.0 to 1.20.5
FUJIFILM Business Inovation Corp.ApeosPro C650 Japan Model1.0.0 to 1.3.6; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp.ApeosPro C750 Japan Model1.0.0 to 1.3.6; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp.ApeosPro C810 Japan Model1.0.0 to 1.3.6; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp.RevoriaPress SC170 Japan Model1.0.0 to 1.22.7
FUJIFILM Business Inovation Corp.RevoriaPress SC180 Japan Model1.0.0 to 1.22.7
FUJIFILM Business Inovation Corp.ApeosPort C2060 Japan Model1.0.0 to 1.60.15
FUJIFILM Business Inovation Corp.ApeosPort C2360 Japan Model1.0.0 to 1.60.15
FUJIFILM Business Inovation Corp.ApeosPort C2570 Japan Model1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp.ApeosPort C3070 Japan Model1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp.ApeosPort C3570 Japan Model1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp.ApeosPort C4570 Japan Model1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp.ApeosPort C5570 Japan Model1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp.ApeosPort C6570 Japan Model1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp.ApeosPort C7070 Japan Model1.0.0 to 1.60.17
FUJIFILM Business Inovation Corp.ApeosPort-VII C3322 Japan Model1.0.0 to 1.60.15
FUJIFILM Business Inovation Corp.ApeosPort-VII C4422 Japan Model1.0.0 to 1.60.15
FUJIFILM Business Inovation Corp.Apeos 1860 Japan Model1.0.0 to 1.2.16; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10
FUJIFILM Business Inovation Corp.Apeos 2560 Japan Model1.0.0 to 1.2.16; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10
FUJIFILM Business Inovation Corp.Apeos 3060 Japan Model1.0.0 to 1.2.16; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10
FUJIFILM Business Inovation Corp.Apeos 3570 Japan Model1.0.0 to 1.3.6; 1.21.0 to 1.21.5; 1.26.0 to 1.26.9
FUJIFILM Business Inovation Corp.Apeos 4570 Japan Model1.0.0 to 1.3.6; 1.21.0 to 1.21.5; 1.26.0 to 1.26.9
FUJIFILM Business Inovation Corp.Apeos 5580 Japan Model1.20.0 to 1.21.4; 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp.Apeos 6580 Japan Model1.20.0 to 1.21.4; 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp.Apeos 7580 Japan Model1.20.0 to 1.21.4; 1.26.0 to 1.26.8
FUJIFILM Business Inovation Corp.Apeos 5330 Japan Model1.0.0 to 1.20.8
FUJIFILM Business Inovation Corp.Apeos 6340 Japan Model1.0.0 to 1.2.11; 1.20.0 to 1.20.4
FUJIFILM Business Inovation Corp.Revoria Press E1100 Japan Model1.0.0 to 1.3.5; 1.21.0 to 1.21.5; 1.26.0 to 1.26.7
FUJIFILM Business Inovation Corp.Revoria Press E1110 Japan Model1.0.0 to 1.3.5; 1.21.0 to 1.21.5; 1.26.0 to 1.26.7
FUJIFILM Business Inovation Corp.Revoria Press E1125 Japan Model1.0.0 to 1.3.5; 1.21.0 to 1.21.5; 1.26.0 to 1.26.7
FUJIFILM Business Inovation Corp.Revoria Press E1136 Japan Model1.0.0 to 1.3.5; 1.21.0 to 1.21.5; 1.26.0 to 1.26.7
FUJIFILM Business Inovation Corp.ApeosPort 1860 Japan Model1.0.0 to 1.60.16
FUJIFILM Business Inovation Corp.ApeosPort 2560 Japan Model1.0.0 to 1.60.16

References

Timeline

Published
Nov 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-463315.5WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.CVE-2023-463325.5WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.CVE-2023-46349.8The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and inclCVE-2023-463435.5In the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c.CVE-2023-463445.4A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate thCVE-2023-463457.5Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c.CVE-2023-463467.5In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 4.1.1 from MyPrestaModules for PrestaShop, aCVE-2023-463479.8In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Design for PrestaShop, a guest can perform SCVE-2023-463489.8SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive informatioCVE-2023-463499.8In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can performCVE-2023-46356.1The EventON plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in versions up to, and including, 2CVE-2023-463509.8SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for PrestaShop versions
CVE-2023-46327: Medium severity, CVSS 5.9 | Vulnix