Read the docs
TI-2024-18576 Aliases CVE-2024-27974GHSA-8qmp-rpj6-v84x

Cross-site request forgery in FUJIFILM Business Inovation Corp. DocuPrint P450 d

Priority LOW 27CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Tampering
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-352.

Summary

Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc. may be altered. As for the details of affected product names, model numbers, and versions, refer to the information provided by the vendor listed under [References].

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00201 10th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
FUJIFILM Business Inovation Corp.DocuPrint P450 dall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint P450 JMall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint P450 psall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint P455 dall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint M455 dfall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint C2255all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint C2450all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint C2450 IIall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint C3200Aall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint C3350all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint C3360all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint C3450 dall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint C3450 d IIall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint 4050all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint 4060all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuPrint 5060all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuCentre-IV C2260all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuCentre-IV C2270all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuCentre-IV C3370all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuCentre-IV C4470all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuCentre-IV C5570all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.ApeosPort-IV C2270all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.ApeosPort-IV C3370all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.ApeosPort-IV C4470all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.ApeosPort-IV C5570all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.ApeosPort-IV C2270 Rall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.ApeosPort-IV C3370 Rall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.ApeosPort-IV C4470 Rall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.ApeosPort-IV C5570 Rall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.ApeosWide 6050/3030all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuWide 6057/3037all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuWide 6055all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuWide 3035all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuWide C842all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuWide 2055all versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuWide 9098αall versions—No fix listedCNA
FUJIFILM Business Inovation Corp.DocuWide 9095αall versions—No fix listedCNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-27974
  2. 2026-10-03 Alias added: GHSA-8qmp-rpj6-v84x

References

Sources