CVE-2023-46327

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-02 · updated 2026-06-17
Weakness: CWE-287

Description

Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Affected products

Fujifilm Apeos 2560 Firmware: from 1.0.0 through 1.2.16; from 1.20.0 through 1.26.10
Fujifilm Apeos 2560 Gk Firmware: from 1.0.0 through 1.2.16; from 1.20.0 through 1.26.10
Fujifilm Apeos 3060 Firmware: from 1.0.0 through 1.2.16; from 1.20.0 through 1.26.10
Fujifilm Apeos 3060 Gk Firmware: from 1.0.0 through 1.2.16; from 1.20.0 through 1.26.10
Fujifilm Apeos 3560 Firmware: from 1.0.0 through 1.2.16; from 1.20.0 through 1.26.10
Fujifilm Apeos 3560 Gk Firmware: from 1.0.0 through 1.2.16; from 1.20.0 through 1.26.10
Fujifilm Apeos 4570 Firmware: from 1.0.0 through 1.3.6; from 1.21.0 through 1.26.9
Fujifilm Apeos 4830 Firmware: before 1.20.9 — fixed in 1.20.9
Fujifilm Apeos 5330 Firmware: before 1.20.9 — fixed in 1.20.9
Fujifilm Apeos 5570 Firmware: from 1.0.0 through 1.3.6; from 1.21.0 through 1.26.9
Fujifilm Apeos 6340 Firmware: from 1.0.0 through 1.2.11; from 1.20.0 through 1.20.6
Fujifilm Apeos 6580 Firmware: before 1.26.9 — fixed in 1.26.9
Fujifilm Apeos 7580 Firmware: before 1.26.9 — fixed in 1.26.9
Fujifilm Apeos C2060 Firmware: from 1.0.0 through 1.2.14; from 1.20.0 through 1.26.10
Fujifilm Apeos C2060 Gk Firmware: from 1.0.0 through 1.2.14; from 1.20.0 through 1.26.10
Fujifilm Apeos C2560 Firmware: from 1.0.0 through 1.2.14; from 1.20.0 through 1.26.10
Fujifilm Apeos C2560 Gk Firmware: from 1.0.0 through 1.2.14; from 1.20.0 through 1.26.10
Fujifilm Apeos C2570 Firmware: from 1.0.0 through 1.3.7; from 1.21.0 through 1.26.11
Fujifilm Apeos C3060 Firmware: from 1.0.0 through 1.2.14; from 1.20.0 through 1.26.10
Fujifilm Apeos C3060 Gk Firmware: from 1.0.0 through 1.2.14; from 1.20.0 through 1.26.10
Fujifilm Apeos C3070 Firmware: from 1.0.0 through 1.3.7; from 1.21.0 through 1.26.11
Fujifilm Apeos C3530 Firmware: before 1.20.10 — fixed in 1.20.10
Fujifilm Apeos C3570 Firmware: from 1.0.0 through 1.3.7; from 1.21.0 through 1.26.11
Fujifilm Apeos C4030 Firmware: before 1.20.10 — fixed in 1.20.10
Fujifilm Apeos C4570 Firmware: from 1.0.0 through 1.3.7; from 1.21.0 through 1.26.11
Fujifilm Apeos C5240 Firmware: from 1.0.0 through 1.2.12; from 1.20.0 through 1.20.6
Fujifilm Apeos C5570 Firmware: from 1.0.0 through 1.3.7; from 1.21.0 through 1.26.11
Fujifilm Apeos C6570 Firmware: from 1.0.0 through 1.3.7; from 1.21.0 through 1.26.11
Fujifilm Apeos C6580 Firmware: from 1.0.0 through 1.3.7; from 1.21.0 through 1.26.12
Fujifilm Apeos C7070 Firmware: from 1.0.0 through 1.3.7; from 1.21.0 through 1.26.11

How to fix

Upgrade to a fixed version: Fujifilm Apeos 4830 Firmware 1.20.9; Fujifilm Apeos 5330 Firmware 1.20.9; Fujifilm Apeos 6580 Firmware 1.26.9; Fujifilm Apeos 7580 Firmware 1.26.9; Fujifilm Apeos C3530 Firmware 1.20.10; Fujifilm Apeos C4030 Firmware 1.20.10; Fujifilm Apeosport-Vii 4021 Firmware 1.60.16, 1.60.3; Fujifilm Apeosport-Vii 5021 Firmware 1.60.16, 1.60.3; Fujifilm Apeosport-Vii C3321 Firmware 1.60.16, 1.60.3; Fujifilm Apeosport-Vii C4421 Firmware 1.60.16, 1.60.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-46327 or the next vulnerability affects your stack