Weak Cipher Vulnerability in Fujifilm Printer Exposes User Credentials

CVE-2021-43774

What is CVE-2021-43774?

A vulnerability has been identified in the Fujifilm DocuCentre-VI C4471 printer, where a weak algorithm allows attackers to exploit the administrative web interface. If an attacker gains unauthorized access—potentially through default credentials—they can download the printer's address book file. This file contains a list of users, including domain and FTP usernames, alongside their encrypted passwords. The passwords are safeguarded using a weak cipher like ROT13, which can easily be decrypted, exposing sensitive user information to potential attacks.

References