CVE-2023-46327

Katalog CVE

CVSS 5.9 · Medium EPSS 0,35%

Kerentanan Improper Authentication pada xerox primelink c9065 firmware, xerox primelink c9070 firmware +42 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Rincian

Terbit di NVD

2 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 27,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 130 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://security.business.xerox.com/en-us/documents/bulletins/ advisory vendor
• https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/1031_addressbook_announce.html advisory vendor
• https://jvn.jp/en/vu/JVNVU96482726/index.html advisory pihak ketiga