FUJIFILM announces possible DoS vulnerability in its MFPs

The company made an announcement about a Denial of Service (DoS) vulnerability for its multi-function printers and single-function printers.

FUJIFILM Business Innovation informed its customers of a potential risk coming from Denial of Service (DoS) vulnerability that has been found on its multi-function and single-function printers. The affected multi-function and single-function printers’ models are listed in the chart below.

The announcement said: “As of now, there have been no confirmed cases of the occurrence of the attack using the vulnerability. However, in order to ensure that our customers can use our products securely, we would like our customers to confirm if the customers’ devices are listed in the chart and upgrade firmware or implement the workaround that are described in below.”

The vulnerability detected means users with network access can send commands to selected FUJIFILM Business Innovation devices through an unsecured network which can potentially make the machine stop with an error code. The company said that this vulnerability was found to have no impact on the information stored on these devices.

The vulnerability is simply leading to productivity loss by means of device needs to be turned off and on (to recover), when a system fault error (116-324) is displayed on the operational panel.

Status of affected models and fixed firmware

The updated firmware is to be downloaded through the network using the remote maintenance service or to be applied by customer service engineers.