CVE-2024-27974

State: Published
Severity: 6.3 Medium
Published: Mar 18, 2024
Updated: Oct 31, 2024
Reserved: Feb 28, 2024

Description

Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc. may be altered. As for the details of affected product names, model numbers, and versions, refer to the information provided by the vendor listed under [References].

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L	CISA-ADP

Weaknesses

CWE-352 Cross-Site Request Forgery (CSRF)

Affected Products

Product	Versions
DocuPrint P450 dFUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint P450 JMFUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint P450 psFUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint P455 dFUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint M455 dfFUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint C2255FUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint C2450FUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint C2450 IIFUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint C3200AFUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint C3350FUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint C3360FUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint C3450 dFUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint C3450 d IIFUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint 4050FUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint 4060FUJIFILM Business Inovation Corp.	all versionsAffected
DocuPrint 5060FUJIFILM Business Inovation Corp.	all versionsAffected
DocuCentre-IV C2260FUJIFILM Business Inovation Corp.	all versionsAffected
DocuCentre-IV C2270FUJIFILM Business Inovation Corp.	all versionsAffected
DocuCentre-IV C3370FUJIFILM Business Inovation Corp.	all versionsAffected
DocuCentre-IV C4470FUJIFILM Business Inovation Corp.	all versionsAffected
DocuCentre-IV C5570FUJIFILM Business Inovation Corp.	all versionsAffected
ApeosPort-IV C2270FUJIFILM Business Inovation Corp.	all versionsAffected
ApeosPort-IV C3370FUJIFILM Business Inovation Corp.	all versionsAffected
ApeosPort-IV C4470FUJIFILM Business Inovation Corp.	all versionsAffected
ApeosPort-IV C5570FUJIFILM Business Inovation Corp.	all versionsAffected
ApeosPort-IV C2270 RFUJIFILM Business Inovation Corp.	all versionsAffected
ApeosPort-IV C3370 RFUJIFILM Business Inovation Corp.	all versionsAffected
ApeosPort-IV C4470 RFUJIFILM Business Inovation Corp.	all versionsAffected
ApeosPort-IV C5570 RFUJIFILM Business Inovation Corp.	all versionsAffected
ApeosWide 6050/3030FUJIFILM Business Inovation Corp.	all versionsAffected
DocuWide 6057/3037FUJIFILM Business Inovation Corp.	all versionsAffected
DocuWide 6055FUJIFILM Business Inovation Corp.	all versionsAffected
DocuWide 3035FUJIFILM Business Inovation Corp.	all versionsAffected
DocuWide C842FUJIFILM Business Inovation Corp.	all versionsAffected
DocuWide 2055FUJIFILM Business Inovation Corp.	all versionsAffected
DocuWide 9098αFUJIFILM Business Inovation Corp.	all versionsAffected
DocuWide 9095αFUJIFILM Business Inovation Corp.	all versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.