NVD Vulnerability Detail

CVE-2021-20679

Summary	Fuji Xerox multifunction devices and printers (DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII C7788/C6688/C5588, ApeosPort-VII C7773/C6673/C5573/C4473/C3373/C3372 C2273, ApeosPort-VII C7788/C6688/C5588, ApeosPort C7070/C6570/C5570/C4570/C3570/C3070/C7070G/C6570G/C5570G/C4570G/C3570G/C3070G, ApeosPort-VII C4421/C3321, ApeosPort C3060/C2560/C2060/C3060G/C2560G/C2060G, ApeosPort-VII CP4421, ApeosPort Print C5570, ApeosPort 5570/4570/5570G/4570G, ApeosPort 3560/3060/2560/3560G/3060G/2560G, ApeosPort-VII 5021/ 4021, ApeosPort-VII P5021, DocuPrint CP 555 d/505 d, DocuPrint P505 d, PrimeLink C9065/C9070, DocuPrint CP475AP, and DocuPrint P475AP) allow an attacker to cause a denial of service (DoS) condition and abnormal end (ABEND) of the affected products via sending a specially crafted command.
Publication Date	March 25, 2021, 3:15 p.m.
Registration Date	March 25, 2021, 8:01 p.m.
Last Update	Nov. 21, 2024, 2:46 p.m.

CVSS3.1 : HIGH
スコア	7.5
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高

CVSS2.0 : HIGH
Score	7.8
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c7773_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c7773:-:::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c6673_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c6673:-:::::::*

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c5573_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c5573:-:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c4473_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c4473:-:::::::*

Configuration5		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c3373_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c3373:-:::::::*

Configuration6		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c3372_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c3372:-:::::::*

Configuration7		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c2273_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c2273:-:::::::*

Configuration8		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c2570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c2570:-:::::::*

Configuration9		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c4422_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c4422:-:::::::*

Configuration10		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c3322_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c3322:-:::::::*

Configuration11		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c2360_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c2360:-:::::::*

Configuration12		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c2060_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c2060:-:::::::*

Configuration13		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_cp4422_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_cp4422:-:::::::*

Configuration14		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_cp3322_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_cp3322:-:::::::*

Configuration15		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_print_c4570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_print_c4570:-:::::::*

Configuration16		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_3570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_3570:-:::::::*

Configuration17		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_1860_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_1860:-:::::::*

Configuration18		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_5022_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_5022:-:::::::*

Configuration19		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_p4022_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_p4022:-:::::::*

Configuration20		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vi_c2264_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vi_c2264:-:::::::*

Configuration21		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docuprint_cp500_d_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docuprint_cp500_d:-:::::::*

Configuration22		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c7788_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c7788:-:::::::*

Configuration23		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c6688_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c6688:-:::::::*

Configuration24		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docucentre-vii_c5588_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docucentre-vii_c5588:-:::::::*

Configuration25		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c7773_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c7773:-:::::::*

Configuration26		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c6673_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c6673:-:::::::*

Configuration27		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c5573_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c5573:-:::::::*

Configuration28		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c4473_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c4473:-:::::::*

Configuration29		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c3373_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c3373:-:::::::*

Configuration30		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c3372_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c3372:-:::::::*

Configuration31		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c2273_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c2273:-:::::::*

Configuration32		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c7788_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c7788:-:::::::*

Configuration33		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c6688_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c6688:-:::::::*

Configuration34		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c5588_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c5588:-:::::::*

Configuration35		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c7070_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c7070:-:::::::*

Configuration36		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c6570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c6570:-:::::::*

Configuration37		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c5570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c5570:-:::::::*

Configuration38		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c4570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c4570:-:::::::*

Configuration39		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c3570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c3570:-:::::::*

Configuration40		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c3070_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c3070:-:::::::*

Configuration41		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c7070g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c7070g:-:::::::*

Configuration42		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c6570g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c6570g:-:::::::*

Configuration43		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c5570g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c5570g:-:::::::*

Configuration44		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c4570g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c4570g:-:::::::*

Configuration45		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c3570g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c3570g:-:::::::*

Configuration46		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c3070g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c3070g:-:::::::*

Configuration47		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c4421_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c4421:-:::::::*

Configuration48		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_c3321_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_c3321:-:::::::*

Configuration49		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c3060_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c3060:-:::::::*

Configuration50		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c2560_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c2560:-:::::::*

Configuration51		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c2060_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c2060:-:::::::*

Configuration52		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c3060g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c3060g:-:::::::*

Configuration53		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c2560g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c2560g:-:::::::*

Configuration54		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_c2060g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_c2060g:-:::::::*

Configuration55		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_cp4421_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_cp4421:-:::::::*

Configuration56		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_print_c5570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_print_c5570:-:::::::*

Configuration57		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_5570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_5570:-:::::::*

Configuration58		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_4570_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_4570:-:::::::*

Configuration59		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_5570g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_5570g:-:::::::*

Configuration60		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_4570g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_4570g:-:::::::*

Configuration61		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_3560_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_3560:-:::::::*

Configuration62		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_3060_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_3060:-:::::::*

Configuration63		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_2560_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_2560:-:::::::*

Configuration64		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_3560g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_3560g:-:::::::*

Configuration65		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_3060g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_3060g:-:::::::*

Configuration66		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport_2560g_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport_2560g:-:::::::*

Configuration67		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_5021_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_5021:-:::::::*

Configuration68		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_4021_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_4021:-:::::::*

Configuration69		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:apeosport-vii_p5021_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:apeosport-vii_p5021:-:::::::*

Configuration70		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docuprint_cp_555_d_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docuprint_cp_555_d:-:::::::*

Configuration71		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docuprint_cp_505_d_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docuprint_cp_505_d:-:::::::*

Configuration72		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docuprint_p505_d_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docuprint_p505_d:-:::::::*

Configuration73		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:primelink_c9065_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:primelink_c9065:-:::::::*

Configuration74		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:primelink_c9070_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:primelink_c9070:-:::::::*

Configuration75		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docuprint_cp475ap_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docuprint_cp475ap:-:::::::*

Configuration76		or higher	or less	more than	less than
cpe:2.3:o:fujixerox:docuprint_p475ap_firmware:-:::::::*
execution environment
1	cpe:2.3:h:fujixerox:docuprint_p475ap:-:::::::*

Related information, measures and tools

No	URL	タグ
1	https://jvn.jp/en/jp/JVN37607293/index.html	Third Party Advisory
2	https://jvn.jp/en/jp/JVN37607293/index.html	Third Party Advisory
3	https://www.fujixerox.co.jp/company/news/notice/2021/0319_announce.html	Vendor Advisory
4	https://www.fujixerox.co.jp/company/news/notice/2021/0319_announce.html	Vendor Advisory
5	https://www.fujixerox.com/eng/company/news/notice/2021/0319_announce.html	Vendor Advisory
6	https://www.fujixerox.com/eng/company/news/notice/2021/0319_announce.html	Vendor Advisory

Common Vulnerabilities List

JVN Vulnerability Information

富士ゼロックス製複合機およびプリンターにおけるサービス運用妨害 (DoS) の脆弱性

Title	富士ゼロックス製複合機およびプリンターにおけるサービス運用妨害 (DoS) の脆弱性
Summary	富士ゼロックス株式会社が提供する複合機およびプリンターには、サービス運用妨害 (DoS) の脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 株式会社イエラエセキュリティ川田柾浩氏
Possible impacts	当該製品にアクセス可能な第三者によって細工されたコマンドを送信されると、当該製品が異常終了する可能性があります。復帰させるには、当該製品の設置場所にて、電源ボタンによる再起動が必要となります。
Solution	[アップデートする] <ul style="margin-top: 0px; margin-bottom: 0px"><li>複合機</li><ul><li>開発者が提供する情報をもとに、ファームウェアを最新版にアップデートしてください。開発者によれば、「ファームウェアのアップデートはリモート保守回線を使用したダウンロード、またはカストマーエンジニアによる対応となります。」とのことです。詳細は開発者にお問い合わせください。</li></ul> <li>プリンター</li><ul><li>開発者が提供する情報をもとに、ファームウェアを最新版にアップデートしてください。</li></ul></ul> 開発者によると、該当する製品に対するファームウェアは段階的に提供される予定です。提供時期は開発者にお問い合わせください。 [ワークアラウンドを実施する] 次のワークアラウンドを実施することで、本脆弱性の影響を軽減することが可能です。 <ul style="margin-top: 0px; margin-bottom: 0px"><li>ファイアウォール等で保護されたネットワーク内に設置する</li><li>インターネットからのアクセスを許可する場合、信頼できる IP アドレスのみにアクセスを許可する</li><li>リモート接続が必要な場合、VPN などのセキュアな接続を使用する</li></ul>
Publication Date	March 19, 2021, midnight
Registration Date	March 19, 2021, 12:05 p.m.
Last Update	April 12, 2021, 1:30 p.m.

Affected System

富士ゼロックス株式会社

(複数の製品)

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2021-20679	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20679

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Fuji Xerox
1	弊社複合機・プリンターのサービス運用妨害(DoS)の脆弱性に関するお知らせ	https://www.fujifilm.com/fb/company/news/notice/2021/0319_announce.html

その他

No	Name	URL
JVN
1	JVN#37607293	https://jvn.jp/jp/JVN37607293/index.html

Change Log

No	Changed Details	Date of change
1	[2021年03月19日] 掲載	March 16, 2021, 3:04 p.m.
2	[2021年04月12日] 影響を受けるシステム:ベンダ情報のURLを更新ベンダ情報：ベンダ情報のURLを更新	April 12, 2021, 12:07 p.m.