PT-2025-6686 · Fuji Xerox · Docuprint Cm225Fw+3

Cheng Li + 7 · Published 2025-02-18 · Updated 2025-02-18 · CVE-2024-45320

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions DocuPrint CP225w versions 01.22.01 and earlier DocuPrint CP228w versions 01.22.01 and earlier DocuPrint CM225fw versions 01.10.01 and earlier DocuPrint CM228fw versions 01.10.01 and earlier

Description An out-of-bounds write issue exists in the affected devices. If a specially crafted printer job file is processed by an affected multifunction printer (MFP), a denial-of-service (DoS) condition may occur.

Recommendations For DocuPrint CP225w versions 01.22.01 and earlier, update to a version later than 01.22.01. For DocuPrint CP228w versions 01.22.01 and earlier, update to a version later than 01.22.01. For DocuPrint CM225fw versions 01.10.01 and earlier, update to a version later than 01.10.01. For DocuPrint CM228fw versions 01.10.01 and earlier, update to a version later than 01.10.01. As a temporary workaround, consider restricting the processing of specially crafted printer job files until a patch is available.

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2024-45320

Affected Products

Docuprint Cm225Fw

Docuprint Cm228Fw

Docuprint Cp225W

Docuprint Cp228W

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-45320 · Security Note
• https://twitter.com/VulmonFeeds/status/1891867464310399464 · Twitter Post
• https://twitter.com/CVEnew/status/1891722670888153447 · Twitter Post
• https://t.me/cvedetector/18275 · Telegram Post
• https://jvn.jp/en/vu/JVNVU96297631 · Note
• https://fujifilm.com/fbglobal/eng/company/news/notice/2025/0217_announce.html · Note
• https://t.me/cvenotify/111598 · Telegram Post