← Database

CVE-2022-26320

CRITICAL CVSS: 9.1 Published: 2022-03-14 Modified: 2026-06-17

Description

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.

Affected Platforms

Fujifilm Apeos C4570Fujifilm Apeosport C5570Fujifilm Apeosport-Vii C7788 FirmwareFujifilm Apeos C328 DwFujifilm Apeos C3570 G FirmwareFujifilm Apeosport 3560 FirmwareFujifilm Apeosport-Vii C3321 FirmwareFujifilm Docuprint 3205 D FirmwareFujifilm Apeosport-Vii C3373Fujifilm Apeosport 5570 G Firmware

Weakness Type

CWE-330

References