CVEvulnerability
CVE-2022-26320
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-330
Description
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
Affected configurations
• rambus safezone basic crypto module (>= 9.3.0 < 10.4.0)
• fujifilm apeos c7070 firmware (< 1.1.7)
• fujifilm apeos c6570 firmware (< 1.1.7)
• fujifilm apeos c5570 firmware (< 1.1.7)
• fujifilm apeos c4570 firmware (< 1.1.7)
• fujifilm apeos c3570 firmware (< 1.1.7)
• fujifilm apeos c3070 firmware (< 1.1.7)
• fujifilm apeos c7070 g firmware (< 1.1.7)
• fujifilm apeos c6570 g firmware (< 1.1.7)
• fujifilm apeos c5570 g firmware (< 1.1.7)
• fujifilm apeos c4570 g firmware (< 1.1.7)
• fujifilm apeos c3570 g firmware (< 1.1.7)
• fujifilm apeos c3070 g firmware (< 1.1.7)
• fujifilm apeos c328 df firmware (< 202112062053)
• fujifilm apeos c328 dw firmware (< 202112062053)
• fujifilm apeos c325 dw firmware (< 202112062053)
• fujifilm apeos c325 z firmware (< 202112062053)
• fujifilm apeos c8180 firmware (< 1.1.6)
• fujifilm apeos c7580 firmware (< 1.1.6)
• fujifilm apeos c6580 firmware (< 1.1.6)
• fujifilm apeosport 3560 firmware (< 1.60.9)
• fujifilm apeosport 3060 firmware (< 1.60.9)
• fujifilm apeosport 2560 firmware (< 1.60.9)
• fujifilm apeosport 3560 g firmware (< 1.60.9)
• fujifilm apeosport 3060 g firmware (< 1.60.9)
• fujifilm apeosport 2560 g firmware (< 1.60.9)
• fujifilm apeosport 4570 g firmware (< 1.60.9)
• fujifilm apeosport 5570 g firmware (< 1.60.9)
• fujifilm apeosport 4570 firmware (< 1.60.9)
• fujifilm apeosport 5570 firmware (< 1.60.9)
• fujifilm apeosport c3060 firmware (< 1.60.9)
• fujifilm apeosport c2560 firmware (< 1.60.9)
• fujifilm apeosport c2060 firmware (< 1.60.9)
• fujifilm apeosport c2560 g firmware (< 1.60.9)
• fujifilm apeosport c2060 g firmware (< 1.60.9)
• fujifilm apeosport c7070 firmware (< 1.60.9)
• fujifilm apeosport c4570 firmware (< 1.60.9)
• fujifilm apeosport c3570 firmware (< 1.60.9)
• fujifilm apeosport c3070 firmware (< 1.60.9)
• fujifilm apeosport c6570 firmware (< 1.60.9)
• fujifilm apeosport c5570 firmware (< 1.60.9)
• fujifilm apeosport c7070 g firmware (< 1.60.9)
• fujifilm apeosport c4570 g firmware (< 1.60.9)
• fujifilm apeosport c3570 g firmware (< 1.60.9)
• fujifilm apeosport c3070 g firmware (< 1.60.9)
• fujifilm apeosport c6570 g firmware (< 1.60.9)
• fujifilm apeosport c5570 g firmware (< 1.60.9)
• fujifilm apeosport print c5570 firmware (< 1.60.9)
• fujifilm apeosport-vii 5021 firmware (< 1.60.9)
• fujifilm apeosport-vii p4021 firmware (< 1.60.9)
• fujifilm apeosport-vii 4021 firmware (< 1.60.9)
• fujifilm apeosport-vii cp4421 firmware (< 1.60.9)
• fujifilm apeosport-vii c4421 firmware (< 1.60.9)
• fujifilm apeosport-vii c3321 firmware (< 1.60.9)
• fujifilm apeosport-vii c7773 firmware (< 1.60.2)
• fujifilm apeosport-vii c6773 firmware (< 1.60.2)
• fujifilm apeosport-vii c5573 firmware (< 1.60.2)
• fujifilm apeosport-vii c4473 firmware (< 1.60.2)
• fujifilm apeosport-vii c3373 firmware (< 1.60.2)
• fujifilm apeosport-vii c3372 firmware (< 1.60.2)
… and 32 more
Related
Weakness · CWE (1)
- CWE-330 Use of Insufficiently Random Values weakness
References
- https://fermatattack.secvuln.info Third Party Advisory
- https://global.canon/en/support/security/index.html Third Party Advisory
- https://web.archive.org/web/20220922042721/https://safezoneswupdate.com/ web.archive.org
- https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.html Mitigation, Third Party Advisory
- https://www.rambus.com/security/response-center/advisories/rmbs-2021-01/ www.rambus.com
- https://fermatattack.secvuln.info Third Party Advisory
- https://global.canon/en/support/security/index.html Third Party Advisory
- https://safezoneswupdate.com safezoneswupdate.com
- https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.html Mitigation, Third Party Advisory