CVE-2018-16709

Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-09-07

Last modified

2024-09-17

Affected products

• Apeosport-v 5070 Firmware (Fujixerox)
• Apeosport-v C3375 Firmware (Fujixerox)
• Apeosport-v C4475 Firmware (Fujixerox)
• Apeosport-v C5576 Firmware (Fujixerox)
• Apeosport-vi C3371 Firmware (Fujixerox)
• Docucentre-iv C2263 Firmware (Fujixerox)
• Docucentre-v 3065 Firmware (Fujixerox)
• Docucentre-v C2263 Firmware (Fujixerox)
• Docucentre-vi C2271 Firmware (Fujixerox)

References

• https://www.exploit-db.com/exploits/45332/