Priority LOW 29
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in…
CVSS 4.0MEDIUM 6.8· Adjacent network · High privileges · No interaction · EPSS 0.00182 · Published 2026-10-01 · No fix listed CWE-22
Priority LOW 26
beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.
CVSS 4.0MEDIUM 5.4· Local · Low privileges · User interaction · EPSS 0.00164 · Published 2026-01-27 · No fix listed CWE-427
Priority LOW 36
Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00355 · Published 2025-08-04 · No fix listed CWE-787
Priority MEDIUM 63
An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker.
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00997 · Published 2025-06-25 · No fix listed CWE-522
Priority HIGH 72
An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.1179 · Published 2025-06-25 · No fix listed CWE-1286
Priority HIGH 72
An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.10742 · Published 2025-06-25 · No fix listed CWE-1286
Priority MEDIUM 63
An unauthenticated attacker may perform a blind server side request forgery (SSRF), due to a CLRF injection issue that can be leveraged to perform HTTP request smuggling.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00982 · Published 2025-06-25 · No fix listed CWE-918
Priority MEDIUM 63
An unauthenticated attacker may perform a limited server side request forgery (SSRF), forcing the target device to open a TCP connection to an arbitrary port number on an arbitrary IP address.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01024 · Published 2025-06-25 · No fix listed CWE-918
Priority HIGH 67
An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631).
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0115 · Published 2025-06-25 · No fix listed CWE-121
Priority MEDIUM 63
An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable de…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.4663 · Published 2025-06-25 · No fix listed CWE-538
Priority LOW 28
Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier.
CVSS 3.0MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00242 · Published 2025-02-18 · No fix listed CWE-787
Priority LOW 32
A vulnerability has been found in Fujifilm Business Innovation Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00752 · Published 2024-12-19 · No fix listed CWE-266
Priority LOW 27
Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00282 · Published 2024-03-18 · No fix listed CWE-352
Priority LOW 24
Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD.
CVSS 3.1MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00345 · Published 2024-03-18 · No fix listed CWE-306