CVE-2019-10950CWE-284

Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet…

published April 30, 2019

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

⚠️ An unsecured telnet service in Fujifilm's FCR Capsula X and Carbon X series could let attackers waltz right in without any authentication! 🔓 Think of it as leaving a back door wide open in your office — anyone could just walk in and access your precious files without even breaking a sweat! With no authentication in place, an attacker could gain access to the underlying operating system, potentially leading to unauthorized control or data access. This situation could be absolutely devastating for sensitive data integrity and operational security.

Put simply

Think of it as leaving a back door wide open in your office — anyone could just walk in and access your precious files without even breaking a sweat! The vulnerability resides in the telnet services of specific Fujifilm models, allowing attackers to connect and interact with the operating system without any credential checks — it's like a welcome mat left out for intruders.

What to do

With no authentication in place, an attacker could gain access to the underlying operating system, potentially leading to unauthorized control or data access. This situation could be absolutely devastating for sensitive data integrity and operational security. To remediate, disable telnet services immediately and switch to secure protocols like SSH. Also, ensure your devices are updated to the latest firmware version to patch any additional vulnerabilities. You've got this! By taking these steps, you can tighten your defenses and keep your data safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03633 · 89.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-04-30T16:44Z
EPSS history
Timeline
  • 30 APR 16:44Z
    Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet…
    cvelistv5