NULL pointer dereference in FUJIFILM Business Innovation products - CVE-2023-29984

Vulnerability identifier: #VU77850

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-29984

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the Web Based Management. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

DocuPrint P118 w
DocuPrint M115 w
DocuPrint M115 fw
DocuPrint M115 z
DocuPrint M118 w
DocuPrint M118 z
DocuPrint M268 dw
DocuPrint M225 dw
DocuPrint M225 z
DocuPrint M268 z
DocuPrint M265 z
DocuPrint P115 w
DocuPrint P225 d
DocuPrint P268 d
DocuPrint P268 dw
DocuPrint P265 dw
MFC-J5820DN
MFC-J4520DW
MFC-J4620DW
MFC-J4625DW
MFC-J4720N
MFC-J4725N
MFC-J491DW
MFC-J497DW
MFC-J5320DW
MFC-J5520DW
MFC-J5620CDW
MFC-J5620DW
MFC-J5625DW
MFC-J5720CDW(JAPAN)
MFC-J5720DW
MFC-J4420DW
MFC-J5920DW
MFC-J690DW
MFC-J738DN
MFC-J738DWN
MFC-J890DW
MFC-J893N
MFC-J895DW
MFC-J898N
MFC-J998DN
MFC-J998DWN
MFC-T810W
MFC-T810W(CHN)
MFC-T910DW
DCP-J972N
e-STUDIO 302DNF
DCP-7180DN
DCP-J4120DW
DCP-J4220N-B
DCP-J4220N-W
DCP-J4225N-B
DCP-J4225N-W
DCP-J572DW
DCP-J572N
DCP-J577N
DCP-J587N
DCP-J772DW
DCP-J774DW
e-STUDIO 301DN
DCP-J973N-B
DCP-J973N-W
DCP-J978N-B
DCP-J978N-W
DCP-J987N-B
DCP-J987N-W
DCP-T510W
DCP-T510W(CHINA)
DCP-T710W
DCP-T710W(CHINA)
MFC-J2320
MFC-J2720
MFC-J4320DW
MFC-J6730DW
MFC-J5630CDW
MFC-J5730DW
MFC-J5830DW
MFC-J5930DW
MFC-J6530DW
MFC-J6535DW
MFC-J6580CDW
MFC-J6583CDW
MFC-J5335DW
MFC-J680DW
MFC-J6930DW
MFC-J6935DW
MFC-J6980CDW
MFC-J6983CDW
MFC-J6995CDW
MFC-J730D(W)N
MFC-J737D(W)N
MFC-J2330DW
MFC-1910WE
MFC-1911NW
MFC-1911W
MFC-1912WR
MFC-1915W
MFC-1916NW
MFC-1919NW
MFC-7880DN
MFC-J775DW
MFC-J2730DW
MFC-J3530DW
MFC-J3930DW
MFC-J460DW
MFC-J480DW
MFC-J485DW
MFC-J5330DW
MFC-L2740DWR
MFC-L2703DW
MFC-L2705DW
MFC-L2707DW
MFC-L2720DN
MFC-L2720DW
MFC-L2720DWR
MFC-L2740DW
MFC-L2740DW(JAPAN)
MFC-L2701DW
MFC-L8610CDW
MFC-L8610CDW(JAPAN)
MFC-L8690CDW
MFC-L8900CDW
MFC-L9570CDW
MFC-L9570CDW(JAPAN)
MFC-L9577CDW
MFC-L2700DW
MFC-J985DW
MFC-J830D(W)N
MFC-J837D(W)N
MFC-J880DW
MFC-J880N
MFC-J885DW
MFC-J887N
MFC-J900D(W)N
MFC-J907D(W)N
MFC-1910W
MFC-J990D(W)N
MFC-J997D(W)N
MFC-L2680W
MFC-L2685DW
MFC-L2700DN
MFC-L2700DNR
MFC-L2700DWR
DCP-J983N
DCP-J762N
DCP-J767N
DCP-J785DW
DCP-J962N
DCP-J963N-B
DCP-J963N-W
DCP-J968N-W
DCP-J968N-B
DCP-J567N
DCP-L2520DW
DCP-L2520DWR
DCP-L2540DN
DCP-L2540DNR
DCP-L2540DW
DCP-L2540DW(JAPAN)
DCP-L2541DW
DCP-L2560DW
DCP-1616NW
DCP-1610WE
DCP-1610WR
DCP-1610WVB
DCP-1612W
DCP-1612WE
DCP-1612WR
DCP-1612WVB
DCP-1615NW
DCP-L2560DWR
DCP-1617NW
DCP-1618W
DCP-1622WE
DCP-1623WE
DCP-1623WR
DCP-J562DW
DCP-J562N
DCP-L8410CDW
FAX-L2700DN
DCP-1610W
HL-L2380DW
HL-L8260CDW
HL-L8260CDN
HL-L9310CDW
HL-L8360CDWT
HL-L8360CDW
HL-1223WR
HL-1223WE
HL-1222WE
HL-1212WVB
HL-1210W
HL-1210WE
HL-1210WR
HL-1210WVB
HL-1211W
HL-1212W
HL-1212WE
HL-1212WR
HL-1218W
HL-L2315DW
HL-L2305W
HL-L2340DW
HL-L2340DWR
HL-L2360DN
HL-L2360DNR
HL-L2360DW
HL-L2361DN
HL-L2365DW
HL-L2365DWR
HL-L2366DW
HL-2560DN

Install updates from vendor's website.

DocuPrint P118 w - update to L
DocuPrint M115 w - update to L
DocuPrint M115 fw - update to L
DocuPrint M115 z - update to L
DocuPrint M118 w - update to L
DocuPrint M118 z - update to L
DocuPrint M268 dw - update to L
DocuPrint M225 dw - update to N
DocuPrint M225 z - update to N
DocuPrint M268 z - update to L
DocuPrint M265 z - update to N
DocuPrint P115 w - update to 1.11
DocuPrint P225 d - update to 1.17
DocuPrint P268 d - update to 1.21
DocuPrint P268 dw - update to 1.21
DocuPrint P265 dw - update to 1.21
MFC-J6730DW - update to W
MFC-J5630CDW - update to L
MFC-J5730DW - update to Y
MFC-J5830DW - update to Y
MFC-J5930DW - update to Y
MFC-J6530DW - update to W
MFC-J6535DW - update to Z
MFC-J6580CDW - update to R
MFC-J6583CDW - update to K
MFC-J5335DW - update to W
MFC-J680DW - update to K
MFC-J6930DW - update to Z
MFC-J6935DW - update to Z
MFC-J6980CDW - update to S
MFC-J6983CDW - update to M
MFC-J6995CDW - update to S
MFC-J730D(W)N - update to L
MFC-J737D(W)N - update to L
MFC-J2330DW - update to W
MFC-1910WE - update to T
MFC-1911NW - update to T
MFC-1911W - update to T
MFC-1912WR - update to T
MFC-1915W - update to T
MFC-1916NW - update to T
MFC-1919NW - update to P
MFC-7880DN - update to Q
MFC-J775DW - update to P
MFC-J2730DW - update to Y
MFC-J3530DW - update to W
MFC-J3930DW - update to Z
MFC-J460DW - update to P
MFC-J480DW - update to P
MFC-J485DW - update to P
MFC-J5330DW - update to W
MFC-L2740DWR - update to -
MFC-L2703DW - update to -
MFC-L2705DW - update to -
MFC-L2707DW - update to -
MFC-L2720DN - update to S
MFC-L2720DW - update to W
MFC-L2720DWR - update to W
MFC-L2740DW - update to -
MFC-L2740DW(JAPAN) - update to T
MFC-L2701DW - update to -
MFC-L8610CDW - update to G
MFC-L8610CDW(JAPAN) - update to C
MFC-L8690CDW - update to G
MFC-L8900CDW - update to G
MFC-L9570CDW - update to G
MFC-L9570CDW(JAPAN) - update to C
MFC-L9577CDW - update to G
MFC-L2700DW - update to X
MFC-J985DW - update to P
MFC-J830D(W)N - update to K
MFC-J837D(W)N - update to K
MFC-J880DW - update to P
MFC-J880N - update to K
MFC-J885DW - update to P
MFC-J887N - update to K
MFC-J900D(W)N - update to K
MFC-J907D(W)N - update to K
MFC-1910W - update to T
MFC-J990D(W)N - update to M
MFC-J997D(W)N - update to M
MFC-L2680W - update to X
MFC-L2685DW - update to X
MFC-L2700DN - update to X
MFC-L2700DNR - update to X
MFC-L2700DWR - update to X
DCP-J983N - update to P
DCP-J762N - update to P
DCP-J767N - update to P
DCP-J785DW - update to G
DCP-J962N - update to P
DCP-J963N-B - update to P
DCP-J963N-W - update to P
DCP-J968N-W - update to P
DCP-J968N-B - update to P
DCP-J567N - update to K
DCP-L2520DW - update to W
DCP-L2520DWR - update to W
DCP-L2540DN - update to X
DCP-L2540DNR - update to X
DCP-L2540DW - update to X
DCP-L2540DW(JAPAN) - update to S
DCP-L2541DW - update to X
DCP-L2560DW - update to W
DCP-1616NW - update to R
DCP-1610WE - update to Z
DCP-1610WR - update to Z
DCP-1610WVB - update to Z
DCP-1612W - update to Z
DCP-1612WE - update to Z
DCP-1612WR - update to Z
DCP-1612WVB - update to Z
DCP-1615NW - update to R
DCP-L2560DWR - update to W
DCP-1617NW - update to R
DCP-1618W - update to P
DCP-1622WE - update to Z
DCP-1623WE - update to Z
DCP-1623WR - update to P
DCP-J562DW - update to L
DCP-J562N - update to K
DCP-L8410CDW - update to G
FAX-L2700DN - update to Q
DCP-1610W - update to Z
HL-L2380DW - update to -
HL-L8260CDW - update to 1.15
HL-L8260CDN - update to 1.15
HL-L9310CDW - update to 1.20
HL-L8360CDWT - update to 1.20
HL-L8360CDW - update to 1.20
HL-1223WR - update to 1.20
HL-1223WE - update to 1.20
HL-1222WE - update to 1.20
HL-1212WVB - update to 1.20
HL-1210W - update to 1.20
HL-1210WE - update to 1.20
HL-1210WR - update to 1.20
HL-1210WVB - update to 1.20
HL-1211W - update to 1.20
HL-1212W - update to 1.20
HL-1212WE - update to 1.20
HL-1212WR - update to 1.20
HL-1218W - update to 1.20
HL-L2315DW - update to 1.24
HL-L2305W - update to 1.24
HL-L2340DW - update to 1.26
HL-L2340DWR - update to 1.26
HL-L2360DN - update to 1.35
HL-L2360DNR - update to 1.35
HL-L2360DW - update to 1.35
HL-L2361DN - update to 1.35
HL-L2365DW - update to 1.35
HL-L2365DWR - update to 1.35
HL-L2366DW - update to 1.35
HL-2560DN - update to 1.35

• https://jvn.jp/en/vu/JVNVU93767756/index.html
• https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/browser_announce.html

• Denial of service in FUJIFILM products
• Denial of service in TOSHIBA products
• Denial of service in Brother Industries products