First published: Thu Nov 02 2023(Updated: )
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Credit: vultures@jpcert.or.jp
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Fujixerox Primelink C9065 Firmware | <85.40.31 | |
Xerox Primelink C9065 Firmware | ||
All of | ||
Fujixerox Primelink C9070 Firmware | <85.40.31 | |
Fujixerox Primelink C9070 Firmware | ||
All of | ||
Xerox Primelink B9136 | <90.40.91 | |
Xerox Primelink B9136 Firmware | ||
All of | ||
Xerox Primelink B9125 | <90.40.91 | |
Xerox Primelink B9125 Firmware | ||
All of | ||
Xerox Primelink B9110 | <90.40.91 | |
Xerox Primelink B9110 Firmware | ||
All of | ||
Xerox Primelink B9100 | <90.40.91 | |
Xerox Primelink B9100 Firmware | ||
All of | ||
Xerox VersaLink C405 | <68.81.41 | |
Xerox Versalink C405 Firmware | ||
All of | ||
Xerox Versalink C505 Firmware | <68.81.41 | |
Xerox Versalink C505 Firmware | ||
All of | ||
Xerox Versalink C605 Firmware | <68.81.41 | |
Xerox Versalink C605 Firmware | ||
All of | ||
Xerox Versalink C7000 Firmware | <56.74.51 | |
Xerox Versalink C7000 Firmware | ||
All of | ||
Xerox Versalink C7020 Firmware | <57.74.51 | |
Xerox Versalink C7020 Firmware | ||
All of | ||
Xerox Versalink C7025 Firmware | <57.74.51 | |
Xerox Versalink C7025 Firmware | ||
All of | ||
Xerox Versalink C7030 | <57.74.51 | |
Xerox Versalink C7030 | ||
All of | ||
Xerox Versalink C7130 Firmware | <69.23.41 | |
Xerox Versalink C7130 Firmware | ||
All of | ||
Xerox Versalink C7125 Firmware | <69.23.41 | |
Xerox Versalink C7125 Firmware | ||
All of | ||
Xerox Versalink C7120 Firmware | <69.23.41 | |
Xerox Versalink C7120 Firmware | ||
All of | ||
Xerox Versalink B405 Firmware | <38.81.41 | |
Xerox Versalink B405 Firmware | ||
All of | ||
Xerox Versalink B605 Firmware | <38.81.41 | |
Xerox Versalink B605 Firmware | ||
All of | ||
Xerox Versalink B615 Firmware | <38.81.41 | |
Xerox Versalink B615 Firmware | ||
All of | ||
Xerox Versalink B7125 | <59.23.41 | |
Xerox Versalink B7125 | ||
All of | ||
Xerox Versalink B7130 Firmware | <59.23.41 | |
Xerox Versalink B7130 Firmware | ||
All of | ||
Xerox Versalink B7135 Firmware | <59.23.41 | |
Xerox Versalink B7135 Firmware | ||
All of | ||
Xerox WorkCentre 6515 Firmware | <65.74.51 | |
Xerox Workcentre 6515 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos 3560 Firmware | >=1.0.0<=1.2.16 | |
Fujifilm Apeos 3560 Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeos 3560 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos 3060 | >=1.0.0<=1.2.16 | |
Fujifilm Apeos 3060 | >=1.20.0<=1.26.10 | |
Fujifilm Apeos C3060 | ||
All of | ||
Any of | ||
Fujifilm Apeos 2560 | >=1.0.0<=1.2.16 | |
Fujifilm Apeos 2560 | >=1.20.0<=1.26.10 | |
Fujifilm Apeos C2560 GK Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos 3560 Firmware | >=1.0.0<=1.2.16 | |
Fujifilm Apeos 3560 Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeos 3560 | ||
All of | ||
Any of | ||
Fujifilm Apeos 3060 GK Firmware | >=1.0.0<=1.2.16 | |
Fujifilm Apeos 3060 GK Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeos C3060 | ||
All of | ||
Any of | ||
Fujifilm Apeos 2560 Firmware | >=1.0.0<=1.2.16 | |
Fujifilm Apeos 2560 Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeos C2560 GK Firmware | ||
All of | ||
Fujifilm Apeos 5330 Firmware | <1.20.9 | |
Fujifilm Apeos 5330 | ||
All of | ||
Fujifilm Apeos 4830 Firmware | <1.20.9 | |
Fujifilm Apeos 4830 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos C5570 Firmware | >=1.0.0<=1.3.6 | |
Fujifilm Apeos C5570 Firmware | >=1.21.0<=1.26.9 | |
Fujifilm Apeos 5570 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos C4570 Firmware | >=1.0.0<=1.3.6 | |
Fujifilm Apeos C4570 Firmware | >=1.21.0<=1.26.9 | |
Fujifilm Apeos 4570 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos 6340 Firmware | >=1.0.0<=1.2.11 | |
Fujifilm Apeos 6340 Firmware | >=1.20.0<=1.20.6 | |
Fujifilm Apeos 6340 | ||
All of | ||
Fujifilm Apeos C7580 Firmware | <1.26.9 | |
Fujifilm Apeos 7580 Firmware | ||
All of | ||
Fujifilm Apeos C6580 Firmware | <1.26.9 | |
Fujifilm Apeos 6580 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos C2570 Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeos C2570 Firmware | >=1.21.0<=1.26.11 | |
Fujifilm Apeos C2570 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeosport C3070 Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeosport C3070 Firmware | >=1.21.0<=1.26.11 | |
Fujifilm Apeos C3070 G Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos C3570 G Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeos C3570 G Firmware | >=1.21.0<=1.26.11 | |
Fujifilm Apeos C3570 G Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos C4570 G Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeos C4570 G Firmware | >=1.21.0<=1.26.11 | |
Fujifilm Apeosport C4570 | ||
All of | ||
Any of | ||
Fujifilm Apeosport C5570 Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeosport C5570 Firmware | >=1.21.0<=1.26.11 | |
Fujifilm Apeos C5570 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos C6570 Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeos C6570 Firmware | >=1.21.0<=1.26.11 | |
Fujifilm Apeos C6570 G Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos C7070 G Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeos C7070 G Firmware | >=1.21.0<=1.26.11 | |
Fujifilm Apeos C7070 G | ||
All of | ||
Any of | ||
Fujifilm Apeos C3060 GK Firmware | >=1.0.0<=1.2.14 | |
Fujifilm Apeos C3060 GK Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeos 3060 | ||
All of | ||
Any of | ||
Fujifilm Apeos C2060 Gk Firmware | >=1.0.0<=1.2.14 | |
Fujifilm Apeos C2060 Gk Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeosport C2060 | ||
All of | ||
Any of | ||
Fujifilm Apeos C2560 GK Firmware | >=1.0.0<=1.2.14 | |
Fujifilm Apeos C2560 GK Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeos C2560 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos 3060 GK Firmware | >=1.0.0<=1.2.14 | |
Fujifilm Apeos 3060 GK Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeos C3060 | ||
All of | ||
Any of | ||
Fujifilm Apeos C2560 GK Firmware | >=1.0.0<=1.2.14 | |
Fujifilm Apeos C2560 GK Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeos 2560 Gk | ||
All of | ||
Any of | ||
Fujifilm Apeos C2060 GK Firmware | >=1.0.0<=1.2.14 | |
Fujifilm Apeos C2060 GK Firmware | >=1.20.0<=1.26.10 | |
Fujifilm Apeos C2060 Gk Firmware | ||
All of | ||
Fujifilm Apeos C4030 Firmware | <1.20.10 | |
Fujifilm Apeos C4030 Firmware | ||
All of | ||
Fujifilm Apeos C3530 Firmware | <1.20.10 | |
Fujifilm Apeos C3530 | ||
All of | ||
Any of | ||
Fujifilm Apeos C5240 Firmware | >=1.0.0<=1.2.12 | |
Fujifilm Apeos C5240 Firmware | >=1.20.0<=1.20.6 | |
Fujifilm Apeos C5240 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos C8180 Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeos C8180 Firmware | >=1.21.0<=1.26.12 | |
Fujifilm Apeos C8180 | ||
All of | ||
Any of | ||
Fujifilm Apeos 7580 Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeos 7580 Firmware | >=1.21.0<=1.26.12 | |
Fujifilm Apeos C7580 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeos 6580 Firmware | >=1.0.0<=1.3.7 | |
Fujifilm Apeos 6580 Firmware | >=1.21.0<=1.26.12 | |
Fujifilm Apeos C6580 Firmware | ||
All of | ||
Fujixerox Apeosport 3060 Firmware | >=1.0.0<=1.60.15 | |
ApeosPort C3060 | ||
All of | ||
Fujixerox Apeosport C2560g Firmware | >=1.0.0<=1.60.15 | |
Fujixerox Apeosport C2560g | ||
All of | ||
Fujixerox Apeosport C2060g Firmware | >=1.0.0<=1.60.15 | |
Fujixerox Apeosport C2060g | ||
All of | ||
Fujixerox Apeosport C3060g Firmware | >=1.0.0<=1.60.15 | |
Fujixerox Apeosport C3060g | ||
All of | ||
Fujixerox Apeosport C2560g Firmware | >=1.0.0<=1.60.15 | |
Fujixerox Apeosport C2560g | ||
All of | ||
Fujixerox Apeosport C2060g Firmware | >=1.0.0<=1.60.15 | |
Fujixerox Apeosport C2060g | ||
All of | ||
Fujixerox Apeosport 3560 Firmware | >=1.0.0<=1.60.16 | |
Fujifilm Apeosport 3560 G Firmware | ||
All of | ||
Fujixerox Apeosport 3060 Firmware | >=1.0.0<=1.60.16 | |
Fujixerox Apeosport 3060 | ||
All of | ||
Fujifilm Apeosport 2560 Firmware | >=1.0.0<=1.60.16 | |
Fujixerox Apeosport 2560g | ||
All of | ||
Fujixerox Apeosport 3560 Firmware | >=1.0.0<=1.60.16 | |
Fujifilm Apeosport 3560 G Firmware | ||
All of | ||
Fujixerox Apeosport C3060g Firmware | >=1.0.0<=1.60.16 | |
Fujixerox Apeosport C3060g | ||
All of | ||
Fujixerox Apeosport C2560g Firmware | >=1.0.0<=1.60.16 | |
Fujixerox Apeosport C2560g | ||
All of | ||
Fujixerox Apeosport 5570 Firmware | <=1.60.16 | |
Fujixerox Apeosport 5570 | ||
All of | ||
Fujixerox Apeosport 4570 Firmware | <=1.60.16 | |
Fujixerox Apeosport 4570 | ||
All of | ||
Fujixerox Apeosport 3570 Firmware | <=1.60.16 | |
Fujixerox Apeosport 3570 Firmware | ||
All of | ||
Fujixerox Apeosport 5570 Firmware | <=1.60.16 | |
Fujixerox Apeosport 5570 | ||
All of | ||
Fujifilm Apeosport 4570 Firmware | <=1.60.16 | |
Fujixerox Apeosport 4570 | ||
All of | ||
Fujixerox Apeosport C7070g Firmware | <=1.60.18 | |
Fujixerox Apeosport C7070 | ||
All of | ||
Fujixerox Apeosport C6570g Firmware | <=1.60.18 | |
Fujixerox Apeosport C6570g | ||
All of | ||
Fujifilm Apeosport-IV C5570 Firmware | <=1.60.18 | |
Fujixerox Apeosport C5570 | ||
All of | ||
Fujixerox Apeosport Print C4570 Firmware | <=1.60.18 | |
Fujixerox Apeosport Print C4570 | ||
All of | ||
Fujixerox Apeosport C3570g Firmware | <=1.60.18 | |
Fujixerox Apeosport C3570 | ||
All of | ||
Fujixerox Apeosport C3070g Firmware | <=1.60.18 | |
Fujixerox Apeosport C3070g | ||
All of | ||
Any of | ||
Fujixerox Apeosport-vii P5021 Firmware | >=1.0.0<1.60.3 | |
Fujixerox Apeosport-vii P5021 Firmware | >1.60.3<1.60.16 | |
Fujixerox Apeosport-vii 5021 Firmware | ||
All of | ||
Any of | ||
Fujixerox Apeosport-vii 4021 Firmware | >=1.0.0<1.60.3 | |
Fujixerox Apeosport-vii 4021 Firmware | >1.60.3<1.60.16 | |
Fujixerox Apeosport-vii 4021 | ||
All of | ||
Any of | ||
Fujixerox Apeosport-vii Cp4421 Firmware | >=1.0.0<1.60.3 | |
Fujixerox Apeosport-vii Cp4421 Firmware | >1.60.3<1.60.16 | |
Fujixerox Apeosport-vii C4421 | ||
All of | ||
Any of | ||
Fujixerox Apeosport-vii C3321 Firmware | >=1.0.0<1.60.3 | |
Fujixerox Apeosport-vii C3321 Firmware | >1.60.3<1.60.16 | |
Fujixerox Apeosport-vii C3321 | ||
All of | ||
Any of | ||
Fujifilm ApeosPro C810 Firmware | >=1.0.0<=1.3.6 | |
Fujifilm ApeosPro C810 Firmware | >=1.21.0<=1.26.14 | |
Fujifilm Apeospro C810 Firmware | ||
All of | ||
Any of | ||
Fujifilm Apeospro C750 | >=1.0.0<=1.3.6 | |
Fujifilm Apeospro C750 | >=1.21.0<=1.26.14 | |
Fujifilm ApeosPro C750 | ||
All of | ||
Any of | ||
Fujifilm ApeosPro C650 Firmware | >=1.0.0<=1.3.6 | |
Fujifilm ApeosPro C650 Firmware | >=1.21.0<=1.26.14 | |
Fujifilm Apeospro C650 Firmware | ||
All of | ||
Fujifilm Primelink C9070 Firmware | <1.145.4 | |
Xerox Primelink C9070 | ||
All of | ||
Xerox Primelink C9065 Firmware | <1.145.4 | |
Xerox Primelink C9065 Firmware | ||
All of | ||
Any of | ||
Fujifilm Revoria Press E1136 Firmware | >=1.0.0<=1.3.5 | |
Fujifilm Revoria Press E1136 Firmware | >=1.21.0<=1.26.11 | |
Fujifilm Revoria Press E1136 Firmware | ||
All of | ||
Any of | ||
Fujifilm Revoria Press E1125 Firmware | >=1.0.0<=1.3.5 | |
Fujifilm Revoria Press E1125 Firmware | >=1.21.0<=1.26.11 | |
Fujifilm Revoria Press E1125 Firmware | ||
All of | ||
Any of | ||
Fujifilm Revoria Press E1110 | >=1.0.0<=1.3.5 | |
Fujifilm Revoria Press E1110 | >=1.21.0<=1.26.11 | |
Fujifilm Revoria Press E1110 Firmware | ||
All of | ||
Any of | ||
Fujifilm Revoria Press E1100 | >=1.0.0<=1.3.5 | |
Fujifilm Revoria Press E1100 | >=1.21.0<=1.26.11 | |
Fujifilm Revoria Press E1100 Firmware | ||
All of | ||
Fujifilm Revoria Press SC180 Firmware | <1.22.8 | |
Fujifilm Revoria Press SC180 Firmware | ||
All of | ||
Fujifilm Revoria Press Sc170 Firmware | <1.22.8 | |
Fujifilm Revoria Press Sc170 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-46327 is classified as a medium severity vulnerability due to the insufficient encryption used for the Address Book export feature in affected printers.
To mitigate CVE-2023-46327, it is recommended to apply firmware updates provided by FUJIFILM Business Innovation Corp. and Xerox Corporation as soon as they are available.
CVE-2023-46327 impacts various models of FUJIFILM and Xerox multifunction printers that use specific firmware versions related to Address Book exports.
The risks include unauthorized access to sensitive information stored in the Address Book due to weak encryption, potentially leading to data leaks.
As a temporary measure, consider disabling the Address Book export feature if it is not necessary for operations until a patch has been applied.