Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375…
Priority MEDIUM 46Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.
Why it matters now
EPSS 0.02125 82nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 18
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fujixerox:docucentre-v_3065_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Fujixerox |
| cpe:2.3:h:fujixerox:docucentre-v_3065:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujixerox |
| cpe:2.3:o:fujixerox:apeosport-v_c4475_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Fujixerox |
| cpe:2.3:h:fujixerox:apeosport-v_c4475:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujixerox |
| cpe:2.3:o:fujixerox:apeosport-vi_c3371_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Fujixerox |
| cpe:2.3:h:fujixerox:apeosport-vi_c3371:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujixerox |
| cpe:2.3:o:fujixerox:apeosport-v_c3375_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Fujixerox |
| cpe:2.3:h:fujixerox:apeosport-v_c3375:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujixerox |
| cpe:2.3:o:fujixerox:docucentre-vi_c2271_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Fujixerox |
| cpe:2.3:h:fujixerox:docucentre-vi_c2271:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujixerox |
- cpe:2.3:o:fujixerox:docucentre-v_3065_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Fujixerox
- cpe:2.3:h:fujixerox:docucentre-v_3065:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujixerox
- cpe:2.3:o:fujixerox:apeosport-v_c4475_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Fujixerox
- cpe:2.3:h:fujixerox:apeosport-v_c4475:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujixerox
- cpe:2.3:o:fujixerox:apeosport-vi_c3371_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Fujixerox
- cpe:2.3:h:fujixerox:apeosport-vi_c3371:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujixerox
- cpe:2.3:o:fujixerox:apeosport-v_c3375_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Fujixerox
- cpe:2.3:h:fujixerox:apeosport-v_c3375:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujixerox
- cpe:2.3:o:fujixerox:docucentre-vi_c2271_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Fujixerox
- cpe:2.3:h:fujixerox:docucentre-vi_c2271:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujixerox
Show 8 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fujixerox:apeosport-v_c5576_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Fujixerox |
| cpe:2.3:h:fujixerox:apeosport-v_c5576:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujixerox |
| cpe:2.3:o:fujixerox:docucentre-iv_c2263_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Fujixerox |
| cpe:2.3:h:fujixerox:docucentre-iv_c2263:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujixerox |
| cpe:2.3:o:fujixerox:docucentre-v_c2263_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Fujixerox |
| cpe:2.3:h:fujixerox:docucentre-v_c2263:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujixerox |
| cpe:2.3:o:fujixerox:apeosport-v_5070_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Fujixerox |
| cpe:2.3:h:fujixerox:apeosport-v_5070:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Fujixerox |
- cpe:2.3:o:fujixerox:apeosport-v_c5576_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Fujixerox
- cpe:2.3:h:fujixerox:apeosport-v_c5576:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujixerox
- cpe:2.3:o:fujixerox:docucentre-iv_c2263_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Fujixerox
- cpe:2.3:h:fujixerox:docucentre-iv_c2263:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujixerox
- cpe:2.3:o:fujixerox:docucentre-v_c2263_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Fujixerox
- cpe:2.3:h:fujixerox:docucentre-v_c2263:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujixerox
- cpe:2.3:o:fujixerox:apeosport-v_5070_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Fujixerox
- cpe:2.3:h:fujixerox:apeosport-v_5070:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujixerox
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-16709
- 2026-10-03 Alias added: GHSA-4gcj-jpgr-v4r6
References
Exploit 1
Sources
- CVE-2018-16709 · CVE Program
- CVE-2018-16709 · NVD
- FIRST EPSS
- GHSA-4gcj-jpgr-v4r6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences