9.1

CVE-2022-26320

EPSS 0.52%
Published 14.03.2022 18:15:08
Last modified 21.11.2024 06:53:44
Source cve@mitre.org
Teams watchlist Login
Open Login

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.

Affected products Warnungen 0 Metrics 3 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Rambus ≫ Safezone Basic Crypto Module SwEditionnon-fips_certified Version >= 9.3.0 < 10.4.0

Fujifilm ≫ Apeos C7070 Firmware Version < 1.1.7

Fujifilm ≫ Apeos C7070 Version-

Fujifilm ≫ Apeos C6570 Firmware Version < 1.1.7

Fujifilm ≫ Apeos C6570 Version-

Fujifilm ≫ Apeos C5570 Firmware Version < 1.1.7

Fujifilm ≫ Apeos C5570 Version-

Fujifilm ≫ Apeos C4570 Firmware Version < 1.1.7

Fujifilm ≫ Apeos C4570 Version-

Fujifilm ≫ Apeos C3570 Firmware Version < 1.1.7

Fujifilm ≫ Apeos C3570 Version-

Fujifilm ≫ Apeos C3070 Firmware Version < 1.1.7

Fujifilm ≫ Apeos C3070 Version-

Fujifilm ≫ Apeos C7070 G Firmware Version < 1.1.7

Fujifilm ≫ Apeos C7070 G Version-

Fujifilm ≫ Apeos C6570 G Firmware Version < 1.1.7

Fujifilm ≫ Apeos C6570 G Version-

Fujifilm ≫ Apeos C5570 G Firmware Version < 1.1.7

Fujifilm ≫ Apeos C5570 G Version-

Fujifilm ≫ Apeos C4570 G Firmware Version < 1.1.7

Fujifilm ≫ Apeos C4570 G Version-

Fujifilm ≫ Apeos C3570 G Firmware Version < 1.1.7

Fujifilm ≫ Apeos C3570 G Version-

Fujifilm ≫ Apeos C3070 G Firmware Version < 1.1.7

Fujifilm ≫ Apeos C3070 G Version-

Fujifilm ≫ Apeos C328 Df Firmware Version < 202112062053

Fujifilm ≫ Apeos C328 Df Version-

Fujifilm ≫ Apeos C328 Dw Firmware Version < 202112062053

Fujifilm ≫ Apeos C328 Dw Version-

Fujifilm ≫ Apeos C325 Dw Firmware Version < 202112062053

Fujifilm ≫ Apeos C325 Dw Version-

Fujifilm ≫ Apeos C325 Z Firmware Version < 202112062053

Fujifilm ≫ Apeos C325 Z Version-

Fujifilm ≫ Apeos C8180 Firmware Version < 1.1.6

Fujifilm ≫ Apeos C8180 Version-

Fujifilm ≫ Apeos C7580 Firmware Version < 1.1.6

Fujifilm ≫ Apeos C7580 Version-

Fujifilm ≫ Apeos C6580 Firmware Version < 1.1.6

Fujifilm ≫ Apeos C6580 Version-

Fujifilm ≫ Apeosport 3560 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 3560 Version-

Fujifilm ≫ Apeosport 3060 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 3060 Version-

Fujifilm ≫ Apeosport 2560 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 2560 Version-

Fujifilm ≫ Apeosport 3560 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 3560 G Version-

Fujifilm ≫ Apeosport 3060 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 3060 G Version-

Fujifilm ≫ Apeosport 2560 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 2560 G Version-

Fujifilm ≫ Apeosport 4570 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 4570 G Version-

Fujifilm ≫ Apeosport 5570 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 5570 G Version-

Fujifilm ≫ Apeosport 4570 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 4570 Version-

Fujifilm ≫ Apeosport 5570 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport 5570 Version-

Fujifilm ≫ Apeosport C3060 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C3060 Version-

Fujifilm ≫ Apeosport C2560 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C2560 Version-

Fujifilm ≫ Apeosport C2060 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C2060 Version-

Fujifilm ≫ Apeosport C3060 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C3060 Version-

Fujifilm ≫ Apeosport C2560 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C2560 G Version-

Fujifilm ≫ Apeosport C2060 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C2060 G Version-

Fujifilm ≫ Apeosport C7070 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C7070 Version-

Fujifilm ≫ Apeosport C4570 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C4570 Version-

Fujifilm ≫ Apeosport C3570 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C3570 Version-

Fujifilm ≫ Apeosport C3070 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C3070 Version-

Fujifilm ≫ Apeosport C6570 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C6570 Version-

Fujifilm ≫ Apeosport C5570 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C5570 Version-

Fujifilm ≫ Apeosport C7070 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C7070 G Version-

Fujifilm ≫ Apeosport C4570 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C4570 G Version-

Fujifilm ≫ Apeosport C3570 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C3570 G Version-

Fujifilm ≫ Apeosport C3070 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C3070 G Version-

Fujifilm ≫ Apeosport C6570 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C6570 G Version-

Fujifilm ≫ Apeosport C5570 G Firmware Version < 1.60.9

Fujifilm ≫ Apeosport C5570 G Version-

Fujifilm ≫ Apeosport Print C5570 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport Print C5570 Version-

Fujifilm ≫ Apeosport-vii 5021 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport-vii 5021 Version-

Fujifilm ≫ Apeosport-vii P4021 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport-vii P4021 Version-

Fujifilm ≫ Apeosport-vii 4021 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport-vii 4021 Version-

Fujifilm ≫ Apeosport-vii Cp4421 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport-vii Cp4421 Version-

Fujifilm ≫ Apeosport-vii C4421 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport-vii C4421 Version-

Fujifilm ≫ Apeosport-vii C3321 Firmware Version < 1.60.9

Fujifilm ≫ Apeosport-vii C3321 Version-

Fujifilm ≫ Apeosport-vii C7773 Firmware Version < 1.60.2

Fujifilm ≫ Apeosport-vii C7773 Version-

Fujifilm ≫ Apeosport-vii C6773 Firmware Version < 1.60.2

Fujifilm ≫ Apeosport-vii C6773 Version-

Fujifilm ≫ Apeosport-vii C5573 Firmware Version < 1.60.2

Fujifilm ≫ Apeosport-vii C5573 Version-

Fujifilm ≫ Apeosport-vii C4473 Firmware Version < 1.60.2

Fujifilm ≫ Apeosport-vii C4473 Version-

Fujifilm ≫ Apeosport-vii C3373 Firmware Version < 1.60.2

Fujifilm ≫ Apeosport-vii C3373 Version-

Fujifilm ≫ Apeosport-vii C3372 Firmware Version < 1.60.2

Fujifilm ≫ Apeosport-vii C3372 Version-

Fujifilm ≫ Apeosport-vii C2273 Firmware Version < 1.60.2

Fujifilm ≫ Apeosport-vii C2273 Version-

Fujifilm ≫ Apeosport-vii C7788 Firmware Version < 1.60.1

Fujifilm ≫ Apeosport-vii C7788 Version-

Fujifilm ≫ Apeosport-vii C6688 Firmware Version < 1.60.1

Fujifilm ≫ Apeosport-vii C6688 Version-

Fujifilm ≫ Apeosport-vii C5588 Firmware Version < 1.60.1

Fujifilm ≫ Apeosport-vii C5588 Version-

Fujifilm ≫ Apeospro C810 Firmware Version < 1.1.6

Fujifilm ≫ Apeospro C810 Version-

Fujifilm ≫ Apeospro C750 Firmware Version < 1.1.6

Fujifilm ≫ Apeospro C750 Version-

Fujifilm ≫ Apeospro C650 Firmware Version < 1.1.6

Fujifilm ≫ Apeospro C650 Version-

Fujifilm ≫ Apeosprint C328 Firmware Version < 202112062117

Fujifilm ≫ Apeosprint C328 Version-

Fujifilm ≫ Apeosprint C328 Dw Firmware Version < 202112062117

Fujifilm ≫ Apeosprint C328 Dw Version-

Fujifilm ≫ Apeosprint C325 Dw Firmware Version < 202112062117

Fujifilm ≫ Apeosprint C325 Dw Version-

Fujifilm ≫ Docucentre-vii C7773 Firmware Version < 1.60.2

Fujifilm ≫ Docucentre-vii C7773 Version-

Fujifilm ≫ Docucentre-vii C6673 Firmware Version < 1.60.2

Fujifilm ≫ Docucentre-vii C6673 Version-

Fujifilm ≫ Docucentre-vii C5573 Firmware Version < 1.60.2

Fujifilm ≫ Docucentre-vii C5573 Version-

Fujifilm ≫ Docucentre-vii C4473 Firmware Version < 1.60.2

Fujifilm ≫ Docucentre-vii C4473 Version-

Fujifilm ≫ Docucentre-vii C3373 Firmware Version < 1.60.2

Fujifilm ≫ Docucentre-vii C3373 Version-

Fujifilm ≫ Docucentre-vii C3372 Firmware Version < 1.60.2

Fujifilm ≫ Docucentre-vii C3372 Version-

Fujifilm ≫ Docucentre-vii C2273 Firmware Version < 1.60.2

Fujifilm ≫ Docucentre-vii C2273 Version-

Fujifilm ≫ Docucentre-vii C7788 Firmware Version < 1.60.1

Fujifilm ≫ Docucentre-vii C7788 Version-

Fujifilm ≫ Docucentre-vii C6688 Firmware Version < 1.60.1

Fujifilm ≫ Docucentre-vii C6688 Version-

Fujifilm ≫ Docucentre-vii C5588 Firmware Version < 1.60.1

Fujifilm ≫ Docucentre-vii C5588 Version-

Fujifilm ≫ Docuprint 4405 D Firmware Version < 1.57.5

Fujifilm ≫ Docuprint 4405 D Version-

Fujifilm ≫ Docuprint 4408 D Firmware Version < 1.57.5

Fujifilm ≫ Docuprint 4408 D Version-

Fujifilm ≫ Docuprint 3505 D Firmware Version < 1.57.5

Fujifilm ≫ Docuprint 3505 D Version-

Fujifilm ≫ Docuprint 3508 D Firmware Version < 1.57.5

Fujifilm ≫ Docuprint 3508 D Version-

Fujifilm ≫ Docuprint 3205 D Firmware Version < 1.57.5

Fujifilm ≫ Docuprint 3205 D Version-

Fujifilm ≫ Docuprint 3208 D Firmware Version < 1.57.5

Fujifilm ≫ Docuprint 3208 D Version-

Fujifilm ≫ Docuprint C3555 D Firmware Version < 1.57.6

Fujifilm ≫ Docuprint C3555 D Version-

Fujifilm ≫ Docuprint C2555 D Firmware Version < 1.57.6

Fujifilm ≫ Docuprint C2555 D Version-

Fujifilm ≫ Primelink C9070 Firmware Version < 1.145.1

Fujifilm ≫ Primelink C9070 Version-

Fujifilm ≫ Primelink C9065 Firmware Version < 1.145.1

Fujifilm ≫ Primelink C9065 Version-

Canon ≫ Imagerunner Firmware Version <= 2020-03-14

Canon ≫ Imageprograf Firmware Version < 2020-03-14

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.52%	0.66

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

CWE-330 Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

https://fermatattack.secvuln.info

Third Party Advisory

https://global.canon/en/support/security/index.html

Third Party Advisory

https://web.archive.org/web/20220922042721/https://safezoneswupdate.com/

https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.html

Third Party Advisory

Mitigation

https://www.rambus.com/security/response-center/advisories/rmbs-2021-01/

https://safezoneswupdate.com

https://nvd.nist.gov/vuln/detail/CVE-2022-26320

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-26320

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-26320

EUVD