CVE-2024-45320 - Vulnerability Details - OpenCVE

Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur.

No CVSS v4.0

No CVSS v3.1

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://jvn.jp/en/vu/JVNVU96297631/
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0217_announce.html

History

Tue, 18 Feb 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 18 Feb 2025 05:30:00 +0000

Type	Values Removed	Values Added
Description		Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur.
Weaknesses		CWE-787
References		https://jvn.jp/en/vu/JVNVU96297631/ https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0217_announce.html
Metrics		cvssV3_0 `{'score': 6.5, 'vector': 'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2025-02-18T05:20:23.570Z

Updated: 2025-02-18T14:58:44.985Z

Reserved: 2024-08-27T01:52:28.658Z

Link: CVE-2024-45320

Vulnrichment

Updated: 2025-02-18T14:58:28.146Z

NVD

Status : Received

Published: 2025-02-18T06:15:12.060

Modified: 2025-02-18T06:15:12.060

Link: CVE-2024-45320

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-45320", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2024-08-27T01:52:28.658Z", "datePublished": "2025-02-18T05:20:23.570Z", "dateUpdated": "2025-02-18T14:58:44.985Z"}, "containers": {"cna": {"affected": [{"vendor": "FUJIFILM Business Innovation Corp.", "product": "DocuPrint CP225w", "versions": [{"version": "01.22.01 and earlier", "status": "affected"}]}, {"vendor": "FUJIFILM Business Innovation Corp.", "product": "DocuPrint CP228w", "versions": [{"version": "01.22.01 and earlier", "status": "affected"}]}, {"vendor": "FUJIFILM Business Innovation Corp.", "product": "DocuPrint CM225fw", "versions": [{"version": "01.10.01 and earlier", "status": "affected"}]}, {"vendor": "FUJIFILM Business Innovation Corp.", "product": "DocuPrint CM228fw", "versions": [{"version": "01.10.01 and earlier", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur."}], "problemTypes": [{"descriptions": [{"description": "Out-of-bounds write", "lang": "en-US", "cweId": "CWE-787", "type": "CWE"}]}], "references": [{"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0217_announce.html"}, {"url": "https://jvn.jp/en/vu/JVNVU96297631/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_0": {"version": "3.0", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2025-02-18T05:20:23.570Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-18T14:58:39.290272Z", "id": "CVE-2024-45320", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-18T14:58:44.985Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-45320", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-18T14:58:39.290272Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-18T14:58:28.146Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "FUJIFILM Business Innovation Corp.", "product": "DocuPrint CP225w", "versions": [{"status": "affected", "version": "01.22.01 and earlier"}]}, {"vendor": "FUJIFILM Business Innovation Corp.", "product": "DocuPrint CP228w", "versions": [{"status": "affected", "version": "01.22.01 and earlier"}]}, {"vendor": "FUJIFILM Business Innovation Corp.", "product": "DocuPrint CM225fw", "versions": [{"status": "affected", "version": "01.10.01 and earlier"}]}, {"vendor": "FUJIFILM Business Innovation Corp.", "product": "DocuPrint CM228fw", "versions": [{"status": "affected", "version": "01.10.01 and earlier"}]}], "references": [{"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0217_announce.html"}, {"url": "https://jvn.jp/en/vu/JVNVU96297631/"}], "descriptions": [{"lang": "en", "value": "Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-787", "description": "Out-of-bounds write"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2025-02-18T05:20:23.570Z"}}}, "cveMetadata": {"cveId": "CVE-2024-45320", "state": "PUBLISHED", "dateUpdated": "2025-02-18T14:58:44.985Z", "dateReserved": "2024-08-27T01:52:28.658Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2025-02-18T05:20:23.570Z", "assignerShortName": "jpcert"}, "dataVersion": "5.1"}