Weak Cipher Vulnerability in Fujifilm Printer Exposes User Credentials
CVE-2021-43774
4.9MEDIUM
What is CVE-2021-43774?
A vulnerability has been identified in the Fujifilm DocuCentre-VI C4471 printer, where a weak algorithm allows attackers to exploit the administrative web interface. If an attacker gains unauthorized access—potentially through default credentials—they can download the printer's address book file. This file contains a list of users, including domain and FTP usernames, alongside their encrypted passwords. The passwords are safeguarded using a weak cipher like ROT13, which can easily be decrypted, exposing sensitive user information to potential attacks.
References
CVSS V3.1
Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved