CVE-2022-26320 - CVE House
Back to Database
Status published Critical CVE-2022-26320

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used...

Vulnerability Description

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-26320

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Affected Software

safezone basic crypto module, apeos c7070 firmware, apeos c6570 firmware, apeos c5570 firmware, apeos c4570 firmware, apeos c3570 firmware, apeos c3070 firmware, apeos c7070 g firmware, apeos c6570 g firmware, apeos c5570 g firmware, apeos c4570 g firmware, apeos c3570 g firmware, apeos c3070 g firmware, apeos c328 df firmware, apeos c328 dw firmware, apeos c325 dw firmware, apeos c325 z firmware, apeos c8180 firmware, apeos c7580 firmware, apeos c6580 firmware, apeosport 3560 firmware, apeosport 3060 firmware, apeosport 2560 firmware, apeosport 3560 g firmware, apeosport 3060 g firmware, apeosport 2560 g firmware, apeosport 4570 g firmware, apeosport 5570 g firmware, apeosport 4570 firmware, apeosport 5570 firmware, apeosport c3060 firmware, apeosport c2560 firmware, apeosport c2060 firmware, apeosport c2560 g firmware, apeosport c2060 g firmware, apeosport c7070 firmware, apeosport c4570 firmware, apeosport c3570 firmware, apeosport c3070 firmware, apeosport c6570 firmware, apeosport c5570 firmware, apeosport c7070 g firmware, apeosport c4570 g firmware, apeosport c3570 g firmware, apeosport c3070 g firmware, apeosport c6570 g firmware, apeosport c5570 g firmware, apeosport print c5570 firmware, apeosport-vii 5021 firmware, apeosport-vii p4021 firmware, apeosport-vii 4021 firmware, apeosport-vii cp4421 firmware, apeosport-vii c4421 firmware, apeosport-vii c3321 firmware, apeosport-vii c7773 firmware, apeosport-vii c6773 firmware, apeosport-vii c5573 firmware, apeosport-vii c4473 firmware, apeosport-vii c3373 firmware, apeosport-vii c3372 firmware, apeosport-vii c2273 firmware, apeosport-vii c7788 firmware, apeosport-vii c6688 firmware, apeosport-vii c5588 firmware, apeospro c810 firmware, apeospro c750 firmware, apeospro c650 firmware, apeosprint c328 firmware, apeosprint c328 dw firmware, apeosprint c325 dw firmware, docucentre-vii c7773 firmware, docucentre-vii c6673 firmware, docucentre-vii c5573 firmware, docucentre-vii c4473 firmware, docucentre-vii c3373 firmware, docucentre-vii c3372 firmware, docucentre-vii c2273 firmware, docucentre-vii c7788 firmware, docucentre-vii c6688 firmware, docucentre-vii c5588 firmware, docuprint 4405 d firmware, docuprint 4408 d firmware, docuprint 3505 d firmware, docuprint 3508 d firmware, docuprint 3205 d firmware, docuprint 3208 d firmware, docuprint c3555 d firmware, docuprint c2555 d firmware, primelink c9070 firmware, primelink c9065 firmware, imagerunner firmware, imageprograf firmware
Vulnerable Versions:
9.3.0, 0

Timeline

Official Publish: March 14th, 2022
Last Modified: October 7th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.