PT-2022-11909
CVE-2021-43774
·
Published
2022-03-03
·
Updated
2022-05-13
Description by
CVSS 3.1
4.9
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Fujifilm DocuCentre-VI C4471 version 1.8
Description
A risky-algorithm issue allows an attacker with access to the administrative web interface to download the address book file, containing a list of users and their encrypted passwords. The passwords are protected by a weak cipher, such as ROT13, which can be easily decrypted to obtain valid domain or FTP usernames and passwords.
Recommendations
For Fujifilm DocuCentre-VI C4471 version 1.8, consider changing the default credentials and restricting access to the administrative web interface to minimize the risk of exploitation. Additionally, avoid using weak ciphers like ROT13 for password protection until a more secure alternative is implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾