CVE-2023-46327 json
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp.
published 2023-11-02 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-50547
- cvss
- 5.9
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 38%
- public exploits
- 0
- none known
Summary
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Patch / fix
- xerox primelink_c9065_firmware 85.40.31
- xerox primelink_c9070_firmware 85.40.31
- xerox primelink_b9136_firmware 90.40.91
- xerox primelink_b9125_firmware 90.40.91
- xerox primelink_b9110_firmware 90.40.91
- xerox primelink_b9100_firmware 90.40.91
- xerox versalink_c405_firmware 68.81.41
- xerox versalink_c505_firmware 68.81.41
- xerox versalink_c605_firmware 68.81.41
- xerox versalink_c7000_firmware 56.74.51
- xerox versalink_c7020_firmware 57.74.51
- xerox versalink_c7025_firmware 57.74.51
- xerox versalink_c7030_firmware 57.74.51
- xerox versalink_c7130_firmware 69.23.41
- xerox versalink_c7125_firmware 69.23.41
- xerox versalink_c7120_firmware 69.23.41
- xerox versalink_b405_firmware 38.81.41
- xerox versalink_b605_firmware 38.81.41
- xerox versalink_b615_firmware 38.81.41
- xerox versalink_b7125_firmware 59.23.41
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.44% chance of exploitation in the next 30 days, higher than 38% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected products
- FUJIFILM Business Inovation Corp. Apeos C3070 Asia Pacific Model
- FUJIFILM Business Inovation Corp. Apeos C3570 Asia Pacific Model
- FUJIFILM Business Inovation Corp. Apeos C4570 Asia Pacific Model
- FUJIFILM Business Inovation Corp. Apeos C2060 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C2360 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C2570 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C3070 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C3570 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C4570 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C5570 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C6570 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C7070 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C6580 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C7580 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C8180 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C3530 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C4030 Japan Model
- FUJIFILM Business Inovation Corp. Apeos C5240 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPro C650 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPro C750 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPro C810 Japan Model
- FUJIFILM Business Inovation Corp. RevoriaPress SC170 Japan Model
- FUJIFILM Business Inovation Corp. RevoriaPress SC180 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort C2060 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort C2360 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort C2570 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort C3070 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort C3570 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort C4570 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort C5570 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort C6570 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort C7070 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort-VII C3322 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort-VII C4422 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 1860 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 2560 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 3060 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 3570 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 4570 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 5580 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 6580 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 7580 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 5330 Japan Model
- FUJIFILM Business Inovation Corp. Apeos 6340 Japan Model
- FUJIFILM Business Inovation Corp. Revoria Press E1100 Japan Model
- FUJIFILM Business Inovation Corp. Revoria Press E1110 Japan Model
- FUJIFILM Business Inovation Corp. Revoria Press E1125 Japan Model
- FUJIFILM Business Inovation Corp. Revoria Press E1136 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort 1860 Japan Model
- FUJIFILM Business Inovation Corp. ApeosPort 2560 Japan Model
Classification
- Weakness
-
- CWE-287 Improper Authentication
References
-
fujifilm.com
/fbglobal/eng/company/news/notice/2023/1031_addressbook_announce.html
vendor-advisory
-
security.business.xerox.com
/en-us/documents/bulletins/
vendor-advisory
-
jvn.jp
/en/vu/JVNVU96482726/index.html
third-party-advisory
Sources
- CVE List CVE-2023-46327
- NVD CVE-2023-46327
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.