PT-2021-14138 · Fuji Xerox · Fuji Xerox Apeosport 2560+39

Masahiro Kawada · Published 2021-03-25 · Updated 2021-04-01 · CVE-2021-20679

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Fuji Xerox multifunction devices and printers (DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII C7788/C6688/C5588, ApeosPort-VII C7773/C6673/C5573/C4473/C3373/C3372 C2273, ApeosPort-VII C7788/C6688/C5588, ApeosPort C7070/C6570/C5570/C4570/C3570/C3070/C7070G/C6570G/C5570G/C4570G/C3570G/C3070G, ApeosPort-VII C4421/C3321, ApeosPort C3060/C2560/C2060/C3060G/C2560G/C2060G, ApeosPort-VII CP4421, ApeosPort Print C5570, ApeosPort 5570/4570/5570G/4570G, ApeosPort 3560/3060/2560/3560G/3060G/2560G, ApeosPort-VII 5021/ 4021, ApeosPort-VII P5021, DocuPrint CP 555 d/505 d, DocuPrint P505 d, PrimeLink C9065/C9070, DocuPrint CP475AP, and DocuPrint P475AP)

Description: The issue allows an attacker to cause a denial of service (DoS) condition and abnormal end (ABEND) of the affected products via sending a specially crafted command.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-20679

Affected Products

Fuji Xerox Apeosport 2560

Fuji Xerox Apeosport 3060

Fuji Xerox Apeosport 3560

Fuji Xerox Apeosport 4570

Fuji Xerox Apeosport 5570

Fuji Xerox Apeosport C2060

Fuji Xerox Apeosport C3070

Fuji Xerox Apeosport C3570

Fuji Xerox Apeosport C6570

Fuji Xerox Apeosport C7070

Fuji Xerox Apeosport Print C5570

Fuji Xerox Apeosport-Vii 4021

Fuji Xerox Apeosport-Vii 5021

Fuji Xerox Apeosport-Vii C2273

Fuji Xerox Apeosport-Vii C3321

Fuji Xerox Apeosport-Vii C3372

Fuji Xerox Apeosport-Vii C3373

Fuji Xerox Apeosport-Vii C4421

Fuji Xerox Apeosport-Vii C4473

Fuji Xerox Apeosport-Vii C5573

Fuji Xerox Apeosport-Vii C5588

Fuji Xerox Apeosport-Vii C6673

Fuji Xerox Apeosport-Vii C6688

Fuji Xerox Apeosport-Vii C7773

Fuji Xerox Apeosport-Vii C7788

Fuji Xerox Docucentre-Vii C2273

Fuji Xerox Docucentre-Vii C3372

Fuji Xerox Docucentre-Vii C3373

Fuji Xerox Docucentre-Vii C4473

Fuji Xerox Docucentre-Vii C5573

Fuji Xerox Docucentre-Vii C5588

Fuji Xerox Docucentre-Vii C6673

Fuji Xerox Docucentre-Vii C6688

Fuji Xerox Docucentre-Vii C7773

Fuji Xerox Docucentre-Vii C7788

Fuji Xerox Docuprint Cp 505 D

Fuji Xerox Docuprint Cp 555 D

Fuji Xerox Docuprint Cp475Ap

Fuji Xerox Primelink C9065

Fuji Xerox Primelink C9070

References · 6

• https://fujixerox.com/eng/company/news/notice/2021/0319_announce.html · Vendor Advisory
• https://fujixerox.co.jp/company/news/notice/2021/0319_announce.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20679 · Security Note
• https://jvn.jp/en/jp/JVN37607293/index.html · Note
• https://t.me/cvenotify/11938 · Telegram Post
• https://t.me/cvenotify/11929 · Telegram Post