CVE-2021-20679

Description

Fuji Xerox multifunction devices and printers (DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII C7788/C6688/C5588, ApeosPort-VII C7773/C6673/C5573/C4473/C3373/C3372 C2273, ApeosPort-VII C7788/C6688/C5588, ApeosPort C7070/C6570/C5570/C4570/C3570/C3070/C7070G/C6570G/C5570G/C4570G/C3570G/C3070G, ApeosPort-VII C4421/C3321, ApeosPort C3060/C2560/C2060/C3060G/C2560G/C2060G, ApeosPort-VII CP4421, ApeosPort Print C5570, ApeosPort 5570/4570/5570G/4570G, ApeosPort 3560/3060/2560/3560G/3060G/2560G, ApeosPort-VII 5021/ 4021, ApeosPort-VII P5021, DocuPrint CP 555 d/505 d, DocuPrint P505 d, PrimeLink C9065/C9070, DocuPrint CP475AP, and DocuPrint P475AP) allow an attacker to cause a denial of service (DoS) condition and abnormal end (ABEND) of the affected products via sending a specially crafted command.

7.5

CVSS

Severity: High

CVSS 3.1 •

CVSS 2.0 •

EPSS 0.51%

Vendor Advisory co.jp Vendor Advisory fujixerox.com

Affected: Fuji Xerox Co.,Ltd. Fuji Xerox multifunction devices and printers

References

Link	Tags
https://www.fujixerox.co.jp/company/news/notice/2021/0319_announce.html	vendor advisory
https://www.fujixerox.com/eng/company/news/notice/2021/0319_announce.html	vendor advisory
https://jvn.jp/en/jp/JVN37607293/index.html	third party advisory

Frequently Asked Questions

What is the severity of CVE-2021-20679?: CVE-2021-20679 has been scored as a high severity vulnerability.
How to fix CVE-2021-20679?: To fix CVE-2021-20679, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-20679 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2021-20679 is being actively exploited. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2021-20679?: CVE-2021-20679 affects Fuji Xerox Co.,Ltd. Fuji Xerox multifunction devices and printers.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.