Description
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Metrics
CVSS 3.1 5.9/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| FUJIFILM Business Inovation Corp. | Apeos C3070 Asia Pacific Model | 1.0.0 to 1.3.7; 1.21.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C3570 Asia Pacific Model | 1.0.0 to 1.3.7; 1.21.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C4570 Asia Pacific Model | 1.0.0 to 1.3.7; 1.21.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C2060 Japan Model | 1.0.0 to 1.2.14; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10 |
| FUJIFILM Business Inovation Corp. | Apeos C2360 Japan Model | 1.0.0 to 1.2.14; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10 |
| FUJIFILM Business Inovation Corp. | Apeos C2570 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C3070 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C3570 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C4570 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C5570 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C6570 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C7070 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.8; 1.26.0 to 1.26.11 |
| FUJIFILM Business Inovation Corp. | Apeos C6580 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8 |
| FUJIFILM Business Inovation Corp. | Apeos C7580 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8 |
| FUJIFILM Business Inovation Corp. | Apeos C8180 Japan Model | 1.0.0 to 1.3.7; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8 |
| FUJIFILM Business Inovation Corp. | Apeos C3530 Japan Model | 1.0.0 to 1.20.9 |
| FUJIFILM Business Inovation Corp. | Apeos C4030 Japan Model | 1.0.0 to 1.20.9 |
| FUJIFILM Business Inovation Corp. | Apeos C5240 Japan Model | 1.0.0 to 1.2.12; 1.20.0 to 1.20.5 |
| FUJIFILM Business Inovation Corp. | ApeosPro C650 Japan Model | 1.0.0 to 1.3.6; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8 |
| FUJIFILM Business Inovation Corp. | ApeosPro C750 Japan Model | 1.0.0 to 1.3.6; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8 |
| FUJIFILM Business Inovation Corp. | ApeosPro C810 Japan Model | 1.0.0 to 1.3.6; 1.21.0 to 1.21.6; 1.26.0 to 1.26.8 |
| FUJIFILM Business Inovation Corp. | RevoriaPress SC170 Japan Model | 1.0.0 to 1.22.7 |
| FUJIFILM Business Inovation Corp. | RevoriaPress SC180 Japan Model | 1.0.0 to 1.22.7 |
| FUJIFILM Business Inovation Corp. | ApeosPort C2060 Japan Model | 1.0.0 to 1.60.15 |
| FUJIFILM Business Inovation Corp. | ApeosPort C2360 Japan Model | 1.0.0 to 1.60.15 |
| FUJIFILM Business Inovation Corp. | ApeosPort C2570 Japan Model | 1.0.0 to 1.60.17 |
| FUJIFILM Business Inovation Corp. | ApeosPort C3070 Japan Model | 1.0.0 to 1.60.17 |
| FUJIFILM Business Inovation Corp. | ApeosPort C3570 Japan Model | 1.0.0 to 1.60.17 |
| FUJIFILM Business Inovation Corp. | ApeosPort C4570 Japan Model | 1.0.0 to 1.60.17 |
| FUJIFILM Business Inovation Corp. | ApeosPort C5570 Japan Model | 1.0.0 to 1.60.17 |
| FUJIFILM Business Inovation Corp. | ApeosPort C6570 Japan Model | 1.0.0 to 1.60.17 |
| FUJIFILM Business Inovation Corp. | ApeosPort C7070 Japan Model | 1.0.0 to 1.60.17 |
| FUJIFILM Business Inovation Corp. | ApeosPort-VII C3322 Japan Model | 1.0.0 to 1.60.15 |
| FUJIFILM Business Inovation Corp. | ApeosPort-VII C4422 Japan Model | 1.0.0 to 1.60.15 |
| FUJIFILM Business Inovation Corp. | Apeos 1860 Japan Model | 1.0.0 to 1.2.16; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10 |
| FUJIFILM Business Inovation Corp. | Apeos 2560 Japan Model | 1.0.0 to 1.2.16; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10 |
| FUJIFILM Business Inovation Corp. | Apeos 3060 Japan Model | 1.0.0 to 1.2.16; 1.20.0 to 1.20.7; 1.26.0 to 1.26.10 |
| FUJIFILM Business Inovation Corp. | Apeos 3570 Japan Model | 1.0.0 to 1.3.6; 1.21.0 to 1.21.5; 1.26.0 to 1.26.9 |
| FUJIFILM Business Inovation Corp. | Apeos 4570 Japan Model | 1.0.0 to 1.3.6; 1.21.0 to 1.21.5; 1.26.0 to 1.26.9 |
| FUJIFILM Business Inovation Corp. | Apeos 5580 Japan Model | 1.20.0 to 1.21.4; 1.26.0 to 1.26.8 |
| FUJIFILM Business Inovation Corp. | Apeos 6580 Japan Model | 1.20.0 to 1.21.4; 1.26.0 to 1.26.8 |
| FUJIFILM Business Inovation Corp. | Apeos 7580 Japan Model | 1.20.0 to 1.21.4; 1.26.0 to 1.26.8 |
| FUJIFILM Business Inovation Corp. | Apeos 5330 Japan Model | 1.0.0 to 1.20.8 |
| FUJIFILM Business Inovation Corp. | Apeos 6340 Japan Model | 1.0.0 to 1.2.11; 1.20.0 to 1.20.4 |
| FUJIFILM Business Inovation Corp. | Revoria Press E1100 Japan Model | 1.0.0 to 1.3.5; 1.21.0 to 1.21.5; 1.26.0 to 1.26.7 |
| FUJIFILM Business Inovation Corp. | Revoria Press E1110 Japan Model | 1.0.0 to 1.3.5; 1.21.0 to 1.21.5; 1.26.0 to 1.26.7 |
| FUJIFILM Business Inovation Corp. | Revoria Press E1125 Japan Model | 1.0.0 to 1.3.5; 1.21.0 to 1.21.5; 1.26.0 to 1.26.7 |
| FUJIFILM Business Inovation Corp. | Revoria Press E1136 Japan Model | 1.0.0 to 1.3.5; 1.21.0 to 1.21.5; 1.26.0 to 1.26.7 |
| FUJIFILM Business Inovation Corp. | ApeosPort 1860 Japan Model | 1.0.0 to 1.60.16 |
| FUJIFILM Business Inovation Corp. | ApeosPort 2560 Japan Model | 1.0.0 to 1.60.16 |
References
- https://jvn.jp/en/vu/JVNVU96482726/index.htmlThird Party Advisory
- https://security.business.xerox.com/en-us/documents/bulletins/Vendor Advisory
- https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/1031_addressbook_announce.htmlVendor Advisory
- https://jvn.jp/en/vu/JVNVU96482726/index.htmlThird Party Advisory
- https://security.business.xerox.com/en-us/documents/bulletins/Vendor Advisory
- https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/1031_addressbook_announce.htmlVendor Advisory
Timeline
- Published
- Nov 2, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified