1. Home
  2. CVE Database
  3. CVE-2018-16709
CRITICAL · 9.8

CVE-2018-16709

Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices al...

Vulnerability Description

Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
FujixeroxDocucentre-V 3065 Firmware-
FujixeroxDocucentre-V 3065-
FujixeroxApeosport-V C4475 Firmware-
FujixeroxApeosport-V C4475-
FujixeroxApeosport-Vi C3371 Firmware-
FujixeroxApeosport-Vi C3371-
FujixeroxApeosport-V C3375 Firmware-
FujixeroxApeosport-V C3375-
FujixeroxDocucentre-Vi C2271 Firmware-
FujixeroxDocucentre-Vi C2271-
FujixeroxApeosport-V C5576 Firmware-
FujixeroxApeosport-V C5576-
FujixeroxDocucentre-Iv C2263 Firmware-
FujixeroxDocucentre-Iv C2263-
FujixeroxDocucentre-V C2263 Firmware-
FujixeroxDocucentre-V C2263-
FujixeroxApeosport-V 5070 Firmware-
FujixeroxApeosport-V 5070-

References

FAQ

What is CVE-2018-16709?

CVE-2018-16709 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices al...

How severe is CVE-2018-16709?

CVE-2018-16709 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2018-16709?

Check the references section above for vendor advisories and patch information. Affected products include: Fujixerox Docucentre-V 3065 Firmware, Fujixerox Docucentre-V 3065, Fujixerox Apeosport-V C4475 Firmware, Fujixerox Apeosport-V C4475, Fujixerox Apeosport-Vi C3371 Firmware.