CVE-2021-43774 - CVE House
Back to Database
Status published Medium CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8...

Vulnerability Description

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer (e.g., by using the default credentials) can download the address book file, which contains the list of users (domain users, FTP users, etc.) stored on the printer, together with their encrypted passwords. The passwords are protected by a weak cipher, such as ROT13, which requires minimal effort to instantly retrieve the original password, giving the attacker a list of valid domain or FTP usernames and passwords.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-43774

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

apeosport-iv 7080 firmware, apeosport-iv 6080 firmware, apeosport-iv 5080 firmware, apeosport-iv 3065 firmware, apeosport-iv 3060 firmware, apeosport-iv 2060 firmware, apeosport-iv 5070 firmware, apeosport-iv 4070 firmware, apeosport-iv 3070 firmware, apeosport-iv c4430 firmware, apeosport-iv c5570 firmware, apeosport-iv c4470 firmware, apeosport-iv c3370 firmware, apeosport-iv c2270 firmware, apeosport-iv c5575 firmware, apeosport-iv c4475 firmware, apeosport-iv c3375 firmware, apeosport-iv c2275 firmware, apeosport-iv c7780 firmware, apeosport-iv c6680 firmware, apeosport-iv c5580 firmware, apeosport-v 4020 firmware, apeosport-v 4070 firmware, apeosport-v 5070 firmware, apeosport-v c3320 firmware, apeosport-v c5585 firmware, apeosport-v c6685 firmware, apeosport-v c7785 firmware, apeosport-v c7775 firmware, apeosport-v c6675 firmware, apeosport-v c5575 firmware, apeosport-v c4475 firmware, apeosport-v c3375 firmware, apeosport-v c2275 firmware, apeosport-v c7775 t2 firmware, apeosport-v c6675 t2 firmware, apeosport-v c5575 t2 firmware, apeosport-v c4475 t2 firmware, apeosport-v c3375 t2 firmware, apeosport-v c3373 t2 firmware, apeosport-v c2275 t2 firmware, apeosport-v c7776 firmware, apeosport-v c6676 firmware, apeosport-v c5576 firmware, apeosport-v c4476 firmware, apeosport-v c3376 firmware, apeosport-v c2276 firmware, apeosport-v c7780 firmware, apeosport-v c6680 firmware, apeosport-v c5580 firmware, apeosport-v c7780 t2 firmware, apeosport-v c6680 t2 firmware, apeosport-v c5580 t2 firmware, apeosport-vi c7771 firmware, apeosport-vi c6671 firmware, apeosport-vi c5571 firmware, apeosport-vi c4471 firmware, apeosport-vi c3371 firmware, apeosport-vi c3370 firmware, apeosport-vi c2271 firmware, apeosport-vii c7773 firmware, apeosport-vii c6673 firmware, apeosport-vii c5573 firmware, apeosport-vii c4473 firmware, apeosport-vii c3373 firmware, apeosport-vii c3372 firmware, apeosport-vii c2273 firmware, docucentre-iv 3060 firmware, docucentre-iv 2060 firmware, docucentre-iv 5070 firmware, docucentre-iv 4070 firmware, docucentre-iv 7080 firmware, docucentre-iv 6080 firmware, docucentre-iv 5080 firmware, docucentre-iv c2260 firmware, docucentre-iv c2263 firmware, docucentre-iv c2265 firmware, docucentre-iv c4430 firmware, docucentre-iv c5570 firmware, docucentre-iv c4470 firmware, docucentre-iv c3370 firmware, docucentre-iv c2270 firmware, docucentre-iv c5575 firmware, docucentre-iv c4475 firmware, docucentre-iv c3375 firmware, docucentre-iv c2275 firmware, docucentre-iv c7780 firmware, docucentre-iv c6680 firmware, docucentre-iv c5580 firmware, docucentre-v 1060 firmware, docucentre-v 2060 firmware, docucentre-v 3060 firmware, docucentre-v 4070 firmware, docucentre-v 5070 firmware, docucentre-v 7080 firmware, docucentre-v 6080 firmware, docucentre-v 5080 firmware, docucentre-v c2263 firmware, docucentre-v c2265 firmware, docucentre-v c5585 firmware, docucentre-v c6685 firmware, docucentre-v c7785 firmware, docucentre-v c7775 firmware, docucentre-v c6675 firmware, docucentre-v c5575 firmware, docucentre-v c4475 firmware, docucentre-v c3375 firmware, docucentre-v c2275 firmware, docucentre-v c7775 t2 firmware, docucentre-v c6675 t2 firmware, docucentre-v c5575 t2 firmware, docucentre-v c4475 t2 firmware, docucentre-v c3375 t2 firmware, docucentre-v c3373 t2 firmware, docucentre-v c2275 t2 firmware, docucentre-v c7776 firmware, docucentre-v c6676 firmware, docucentre-v c5576 firmware, docucentre-v c4476 firmware, docucentre-v c3376 firmware, docucentre-v c2276 firmware, docucentre-v c7780 firmware, docucentre-v c6680 firmware, docucentre-v c5580 firmware, docucentre-v c7780 t2 firmware, docucentre-v c6680 t2 firmware, docucentre-v c5580 t2 firmware, docucentre-vi c7771 firmware, docucentre-vi c6671 firmware, docucentre-vi c5571 firmware, docucentre-vi c4471 firmware, docucentre-vi c3371 firmware, docucentre-vi c3370 firmware, docucentre-vi c2271 firmware, docucentre-vii c7773 firmware, docucentre-vii c6673 firmware, docucentre-vii c5573 firmware, docucentre-vii c4473 firmware, docucentre-vii c3373 firmware, docucentre-vii c3372 firmware, docucentre-vii c2273 firmware, docucolor 1450 ga firmware, docuprint m465 ap firmware, docuprint cm415 ap firmware, docuprint cm505da firmware, fuji xerox color c60 firmware, fuji xerox color c70 firmware, fuji xerox color c75 firmware, fuji xerox d125 firmware, fuji xerox d110 firmware, fuji xerox d95 firmware, fuji xerox d136 firmware, fuji xerox b9100 firmware, fuji xerox b9110 firmware, fuji xerox b9125 firmware, fuji xerox b9136 firmware, versant 170i firmware, versant 180i firmware, versant 80 firmware, versant 180 firmware
Vulnerable Versions:
0

Timeline

Official Publish: March 3rd, 2022
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.