CVE-2024-27974

MEDIUM

FUJIFILM DocuPrint Series - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc. may be altered. As for the details of affected product names, model numbers, and versions, refer to the information provided by the vendor listed under [References].

References (2)

Core 2

Scores

CVSS v3 6.3
EPSS 0.0020
EPSS Percentile 10.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-352
Status published
Products (37)
FUJIFILM Business Inovation Corp./ApeosPort-IV C2270 all versions
FUJIFILM Business Inovation Corp./ApeosPort-IV C2270 R all versions
FUJIFILM Business Inovation Corp./ApeosPort-IV C3370 all versions
FUJIFILM Business Inovation Corp./ApeosPort-IV C3370 R all versions
FUJIFILM Business Inovation Corp./ApeosPort-IV C4470 all versions
FUJIFILM Business Inovation Corp./ApeosPort-IV C4470 R all versions
FUJIFILM Business Inovation Corp./ApeosPort-IV C5570 all versions
FUJIFILM Business Inovation Corp./ApeosPort-IV C5570 R all versions
FUJIFILM Business Inovation Corp./ApeosWide 6050/3030 all versions
FUJIFILM Business Inovation Corp./DocuCentre-IV C2260 all versions
... and 27 more
Published Mar 18, 2024
Tracked Since Feb 18, 2026