CVSS: 8.1EPSS: 0%CPEs: 37EXPL: 0CVE-2024-27974
https://notcve.org/view.php?id=CVE-2024-27974
18 Mar 2024 — Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc. may be altered. As for the details of affected product names, model numbers, and versions, refer to the information provided by the vendor listed under [References]. Vulnerabilidad de Cross-Site Request Forgery en ... • https://jvn.jp/en/jp/JVN34328023 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 4.9EPSS: 0%CPEs: 320EXPL: 1CVE-2021-43774
https://notcve.org/view.php?id=CVE-2021-43774
03 Mar 2022 — A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer (e.g., by using the default credentials) can download the address book file, which contains the list of users (domain users, FTP users, etc.) stored on the printer, together with their encrypted passwords. The passwords are protected by a weak cipher, such as ROT13, which requires minimal effort to instantly retrieve the original password, givi... • https://www.foregenix.com/blog • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •