CVEvulnerability

CVE-2022-26320

9.1 CRITICAL Published 2022-03-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-330

Description

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.

Affected configurations

• rambus safezone basic crypto module (>= 9.3.0 < 10.4.0) • fujifilm apeos c7070 firmware (< 1.1.7) • fujifilm apeos c6570 firmware (< 1.1.7) • fujifilm apeos c5570 firmware (< 1.1.7) • fujifilm apeos c4570 firmware (< 1.1.7) • fujifilm apeos c3570 firmware (< 1.1.7) • fujifilm apeos c3070 firmware (< 1.1.7) • fujifilm apeos c7070 g firmware (< 1.1.7) • fujifilm apeos c6570 g firmware (< 1.1.7) • fujifilm apeos c5570 g firmware (< 1.1.7) • fujifilm apeos c4570 g firmware (< 1.1.7) • fujifilm apeos c3570 g firmware (< 1.1.7) • fujifilm apeos c3070 g firmware (< 1.1.7) • fujifilm apeos c328 df firmware (< 202112062053) • fujifilm apeos c328 dw firmware (< 202112062053) • fujifilm apeos c325 dw firmware (< 202112062053) • fujifilm apeos c325 z firmware (< 202112062053) • fujifilm apeos c8180 firmware (< 1.1.6) • fujifilm apeos c7580 firmware (< 1.1.6) • fujifilm apeos c6580 firmware (< 1.1.6) • fujifilm apeosport 3560 firmware (< 1.60.9) • fujifilm apeosport 3060 firmware (< 1.60.9) • fujifilm apeosport 2560 firmware (< 1.60.9) • fujifilm apeosport 3560 g firmware (< 1.60.9) • fujifilm apeosport 3060 g firmware (< 1.60.9) • fujifilm apeosport 2560 g firmware (< 1.60.9) • fujifilm apeosport 4570 g firmware (< 1.60.9) • fujifilm apeosport 5570 g firmware (< 1.60.9) • fujifilm apeosport 4570 firmware (< 1.60.9) • fujifilm apeosport 5570 firmware (< 1.60.9) • fujifilm apeosport c3060 firmware (< 1.60.9) • fujifilm apeosport c2560 firmware (< 1.60.9) • fujifilm apeosport c2060 firmware (< 1.60.9) • fujifilm apeosport c2560 g firmware (< 1.60.9) • fujifilm apeosport c2060 g firmware (< 1.60.9) • fujifilm apeosport c7070 firmware (< 1.60.9) • fujifilm apeosport c4570 firmware (< 1.60.9) • fujifilm apeosport c3570 firmware (< 1.60.9) • fujifilm apeosport c3070 firmware (< 1.60.9) • fujifilm apeosport c6570 firmware (< 1.60.9) • fujifilm apeosport c5570 firmware (< 1.60.9) • fujifilm apeosport c7070 g firmware (< 1.60.9) • fujifilm apeosport c4570 g firmware (< 1.60.9) • fujifilm apeosport c3570 g firmware (< 1.60.9) • fujifilm apeosport c3070 g firmware (< 1.60.9) • fujifilm apeosport c6570 g firmware (< 1.60.9) • fujifilm apeosport c5570 g firmware (< 1.60.9) • fujifilm apeosport print c5570 firmware (< 1.60.9) • fujifilm apeosport-vii 5021 firmware (< 1.60.9) • fujifilm apeosport-vii p4021 firmware (< 1.60.9) • fujifilm apeosport-vii 4021 firmware (< 1.60.9) • fujifilm apeosport-vii cp4421 firmware (< 1.60.9) • fujifilm apeosport-vii c4421 firmware (< 1.60.9) • fujifilm apeosport-vii c3321 firmware (< 1.60.9) • fujifilm apeosport-vii c7773 firmware (< 1.60.2) • fujifilm apeosport-vii c6773 firmware (< 1.60.2) • fujifilm apeosport-vii c5573 firmware (< 1.60.2) • fujifilm apeosport-vii c4473 firmware (< 1.60.2) • fujifilm apeosport-vii c3373 firmware (< 1.60.2) • fujifilm apeosport-vii c3372 firmware (< 1.60.2) … and 32 more

Related

Weakness · CWE (1)

  • CWE-330 Use of Insufficiently Random Values weakness

References