CVE-2018-16709

Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263…

published September 7, 2018

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

🚨 A crafted PJL command is all it takes for attackers to read or write files on selected Fuji Xerox printers! 🔥 Think of it like a sneaky delivery person who can access your mailbox and swap out your important letters without you knowing. A small, clever note allows them to open any mail you have in there! This vulnerability could allow unauthorized individuals to access sensitive documents or even modify files, potentially leading to data leaks or manipulation of important information. Imagine the chaos if confidential contracts or personal data end up in the wrong hands!

Put simply

Think of it like a sneaky delivery person who can access your mailbox and swap out your important letters without you knowing. A small, clever note allows them to open any mail you have in there! This vulnerability occurs in models such as Fuji Xerox DocuCentre-V and ApeosPort series, allowing remote attackers to execute crafted Printer Job Language (PJL) commands that can read or write files on the device.

What to do

This vulnerability could allow unauthorized individuals to access sensitive documents or even modify files, potentially leading to data leaks or manipulation of important information. Imagine the chaos if confidential contracts or personal data end up in the wrong hands! To protect your devices, ensure that they are updated to the latest firmware version available from Fuji Xerox. Disable any unnecessary remote access features and regularly audit user permissions to prevent unauthorized access. You've got this! With these steps, you'll secure your printers in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02125 · 81.7th percentile
Published
2018-09-07T19:00Z
EPSS history
Timeline
  • 07 SEP 19:00Z
    Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263…
    cvelistv5