7.5

CVE-2024-12782

A vulnerability has been found in Fujifilm Business Innovation Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.html#hashHome of the component Web Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains that "during technical verification it is not possible to reproduce any active actions like reboots which were mentioned in the original researcher disclosure."

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorFujifilm Business Innovation
≫
Product Apeos C3070
Version 22.1.0
Status affected
Version 22.1.1
Status affected
Version 22.1.2
Status affected
Version 22.1.3
Status affected
Version 22.1.4
Status affected
Version 22.1.5
Status affected
Version 22.1.6
Status affected
Version 22.1.7
Status affected
Version 22.1.8
Status affected
Version 22.1.9
Status affected
Version 22.1.10
Status affected
Version 22.1.11
Status affected
Version 22.1.12
Status affected
Version 22.1.13
Status affected
Version 22.1.14
Status affected
Version 22.1.15
Status affected
Version 22.1.16
Status affected
Version 22.1.17
Status affected
Version 22.1.18
Status affected
Version 22.1.19
Status affected
Version 22.1.20
Status affected
Version 22.1.21
Status affected
Version 22.1.22
Status affected
Version 22.1.23
Status affected
Version 22.1.24
Status affected
Version 22.1.25
Status affected
Version 22.1.26
Status affected
Version 22.1.27
Status affected
Version 22.1.28
Status affected
Version 22.12.0
Status affected
Version 22.12.1
Status affected
Version 22.12.2
Status affected
Version 23.7.0
Status affected
Version 23.7.1
Status affected
Version 23.7.2
Status affected
Version 23.7.3
Status affected
Version 23.9.0
Status affected
Version 23.9.1
Status affected
Version 23.9.2
Status affected
Version 23.9.3
Status affected
Version 23.9.4
Status affected
Version 23.9.5
Status affected
Version 23.9.6
Status affected
Version 23.9.7
Status affected
Version 23.9.8
Status affected
Version 23.9.9
Status affected
Version 23.9.10
Status affected
Version 23.9.11
Status affected
Version 23.9.12
Status affected
Version 23.9.13
Status affected
Version 23.9.14
Status affected
Version 23.9.15
Status affected
Version 23.9.16
Status affected
Version 23.12.0
Status affected
Version 23.12.1
Status affected
Version 23.12.2
Status affected
Version 23.12.3
Status affected
Version 23.12.4
Status affected
Version 23.12.5
Status affected
Version 23.12.6
Status affected
Version 23.12.7
Status affected
Version 23.12.8
Status affected
Version 23.12.9
Status affected
Version 23.12.10
Status affected
Version 23.12.11
Status affected
Version 23.12.12
Status affected
Version 23.12.13
Status affected
Version 23.12.14
Status affected
Version 23.12.15
Status affected
Version 24.2.0
Status affected
Version 24.2.1
Status affected
Version 24.2.2
Status affected
Version 24.2.3
Status affected
Version 24.2.4
Status affected
Version 24.2.5
Status affected
Version 24.2.6
Status affected
Version 24.2.7
Status affected
Version 24.2.8
Status affected
Version 24.2.9
Status affected
Version 24.2.10
Status affected
Version 24.2.11
Status affected
Version 24.2.12
Status affected
Version 24.2.13
Status affected
Version 24.2.14
Status affected
Version 24.2.15
Status affected
Version 24.5.0
Status affected
Version 24.5.1
Status affected
Version 24.8.0
Status affected
Version 24.8.1
Status affected
Version 24.8.2
Status affected
Version 24.8.3
Status affected
Version 24.8.4
Status affected
Version 24.8.5
Status affected
Version 24.8.6
Status affected
Version 24.8.7
Status affected
Version 24.8.8
Status affected
Version 24.8.9
Status affected
Version 24.8.10
Status affected
Version 24.8.11
Status affected
Version 24.8.12
Status affected
Version 24.8.13
Status affected
Version 24.8.14
Status affected
Version 24.8.15
Status affected
Version 24.8.16
Status affected
Version 24.8.17
Status affected
Version 24.8.18
Status affected
Version 24.8.19
Status affected
Version 24.8.20
Status affected
Version 24.8.21
Status affected
Version 24.8.22
Status affected
Version 24.8.23
Status affected
Version 24.8.24
Status affected
Version 24.8.25
Status affected
Version 24.8.26
Status affected
Version 24.8.27
Status affected
Version 24.8.28
Status affected
VendorFujifilm Business Innovation
≫
Product Apeos C5570
Version 22.1.0
Status affected
Version 22.1.1
Status affected
Version 22.1.2
Status affected
Version 22.1.3
Status affected
Version 22.1.4
Status affected
Version 22.1.5
Status affected
Version 22.1.6
Status affected
Version 22.1.7
Status affected
Version 22.1.8
Status affected
Version 22.1.9
Status affected
Version 22.1.10
Status affected
Version 22.1.11
Status affected
Version 22.1.12
Status affected
Version 22.1.13
Status affected
Version 22.1.14
Status affected
Version 22.1.15
Status affected
Version 22.1.16
Status affected
Version 22.1.17
Status affected
Version 22.1.18
Status affected
Version 22.1.19
Status affected
Version 22.1.20
Status affected
Version 22.1.21
Status affected
Version 22.1.22
Status affected
Version 22.1.23
Status affected
Version 22.1.24
Status affected
Version 22.1.25
Status affected
Version 22.1.26
Status affected
Version 22.1.27
Status affected
Version 22.1.28
Status affected
Version 22.12.0
Status affected
Version 22.12.1
Status affected
Version 22.12.2
Status affected
Version 23.7.0
Status affected
Version 23.7.1
Status affected
Version 23.7.2
Status affected
Version 23.7.3
Status affected
Version 23.9.0
Status affected
Version 23.9.1
Status affected
Version 23.9.2
Status affected
Version 23.9.3
Status affected
Version 23.9.4
Status affected
Version 23.9.5
Status affected
Version 23.9.6
Status affected
Version 23.9.7
Status affected
Version 23.9.8
Status affected
Version 23.9.9
Status affected
Version 23.9.10
Status affected
Version 23.9.11
Status affected
Version 23.9.12
Status affected
Version 23.9.13
Status affected
Version 23.9.14
Status affected
Version 23.9.15
Status affected
Version 23.9.16
Status affected
Version 23.12.0
Status affected
Version 23.12.1
Status affected
Version 23.12.2
Status affected
Version 23.12.3
Status affected
Version 23.12.4
Status affected
Version 23.12.5
Status affected
Version 23.12.6
Status affected
Version 23.12.7
Status affected
Version 23.12.8
Status affected
Version 23.12.9
Status affected
Version 23.12.10
Status affected
Version 23.12.11
Status affected
Version 23.12.12
Status affected
Version 23.12.13
Status affected
Version 23.12.14
Status affected
Version 23.12.15
Status affected
Version 24.2.0
Status affected
Version 24.2.1
Status affected
Version 24.2.2
Status affected
Version 24.2.3
Status affected
Version 24.2.4
Status affected
Version 24.2.5
Status affected
Version 24.2.6
Status affected
Version 24.2.7
Status affected
Version 24.2.8
Status affected
Version 24.2.9
Status affected
Version 24.2.10
Status affected
Version 24.2.11
Status affected
Version 24.2.12
Status affected
Version 24.2.13
Status affected
Version 24.2.14
Status affected
Version 24.2.15
Status affected
Version 24.5.0
Status affected
Version 24.5.1
Status affected
Version 24.8.0
Status affected
Version 24.8.1
Status affected
Version 24.8.2
Status affected
Version 24.8.3
Status affected
Version 24.8.4
Status affected
Version 24.8.5
Status affected
Version 24.8.6
Status affected
Version 24.8.7
Status affected
Version 24.8.8
Status affected
Version 24.8.9
Status affected
Version 24.8.10
Status affected
Version 24.8.11
Status affected
Version 24.8.12
Status affected
Version 24.8.13
Status affected
Version 24.8.14
Status affected
Version 24.8.15
Status affected
Version 24.8.16
Status affected
Version 24.8.17
Status affected
Version 24.8.18
Status affected
Version 24.8.19
Status affected
Version 24.8.20
Status affected
Version 24.8.21
Status affected
Version 24.8.22
Status affected
Version 24.8.23
Status affected
Version 24.8.24
Status affected
Version 24.8.25
Status affected
Version 24.8.26
Status affected
Version 24.8.27
Status affected
Version 24.8.28
Status affected
VendorFujifilm Business Innovation
≫
Product Apeos C6580
Version 22.1.0
Status affected
Version 22.1.1
Status affected
Version 22.1.2
Status affected
Version 22.1.3
Status affected
Version 22.1.4
Status affected
Version 22.1.5
Status affected
Version 22.1.6
Status affected
Version 22.1.7
Status affected
Version 22.1.8
Status affected
Version 22.1.9
Status affected
Version 22.1.10
Status affected
Version 22.1.11
Status affected
Version 22.1.12
Status affected
Version 22.1.13
Status affected
Version 22.1.14
Status affected
Version 22.1.15
Status affected
Version 22.1.16
Status affected
Version 22.1.17
Status affected
Version 22.1.18
Status affected
Version 22.1.19
Status affected
Version 22.1.20
Status affected
Version 22.1.21
Status affected
Version 22.1.22
Status affected
Version 22.1.23
Status affected
Version 22.1.24
Status affected
Version 22.1.25
Status affected
Version 22.1.26
Status affected
Version 22.1.27
Status affected
Version 22.1.28
Status affected
Version 22.12.0
Status affected
Version 22.12.1
Status affected
Version 22.12.2
Status affected
Version 23.7.0
Status affected
Version 23.7.1
Status affected
Version 23.7.2
Status affected
Version 23.7.3
Status affected
Version 23.9.0
Status affected
Version 23.9.1
Status affected
Version 23.9.2
Status affected
Version 23.9.3
Status affected
Version 23.9.4
Status affected
Version 23.9.5
Status affected
Version 23.9.6
Status affected
Version 23.9.7
Status affected
Version 23.9.8
Status affected
Version 23.9.9
Status affected
Version 23.9.10
Status affected
Version 23.9.11
Status affected
Version 23.9.12
Status affected
Version 23.9.13
Status affected
Version 23.9.14
Status affected
Version 23.9.15
Status affected
Version 23.9.16
Status affected
Version 23.12.0
Status affected
Version 23.12.1
Status affected
Version 23.12.2
Status affected
Version 23.12.3
Status affected
Version 23.12.4
Status affected
Version 23.12.5
Status affected
Version 23.12.6
Status affected
Version 23.12.7
Status affected
Version 23.12.8
Status affected
Version 23.12.9
Status affected
Version 23.12.10
Status affected
Version 23.12.11
Status affected
Version 23.12.12
Status affected
Version 23.12.13
Status affected
Version 23.12.14
Status affected
Version 23.12.15
Status affected
Version 24.2.0
Status affected
Version 24.2.1
Status affected
Version 24.2.2
Status affected
Version 24.2.3
Status affected
Version 24.2.4
Status affected
Version 24.2.5
Status affected
Version 24.2.6
Status affected
Version 24.2.7
Status affected
Version 24.2.8
Status affected
Version 24.2.9
Status affected
Version 24.2.10
Status affected
Version 24.2.11
Status affected
Version 24.2.12
Status affected
Version 24.2.13
Status affected
Version 24.2.14
Status affected
Version 24.2.15
Status affected
Version 24.5.0
Status affected
Version 24.5.1
Status affected
Version 24.8.0
Status affected
Version 24.8.1
Status affected
Version 24.8.2
Status affected
Version 24.8.3
Status affected
Version 24.8.4
Status affected
Version 24.8.5
Status affected
Version 24.8.6
Status affected
Version 24.8.7
Status affected
Version 24.8.8
Status affected
Version 24.8.9
Status affected
Version 24.8.10
Status affected
Version 24.8.11
Status affected
Version 24.8.12
Status affected
Version 24.8.13
Status affected
Version 24.8.14
Status affected
Version 24.8.15
Status affected
Version 24.8.16
Status affected
Version 24.8.17
Status affected
Version 24.8.18
Status affected
Version 24.8.19
Status affected
Version 24.8.20
Status affected
Version 24.8.21
Status affected
Version 24.8.22
Status affected
Version 24.8.23
Status affected
Version 24.8.24
Status affected
Version 24.8.25
Status affected
Version 24.8.26
Status affected
Version 24.8.27
Status affected
Version 24.8.28
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.307
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
cna@vuldb.com 6.9 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
cna@vuldb.com 7.3 3.9 3.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cna@vuldb.com 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-266 Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

CWE-285 Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.