CVE-2022-26320
—CVSS 3.1
9.1 critical
EPSS
<1%p60
Published
()
Modified
Description
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
- Vendors
- rambusfujifilmcanon
- Products
- safezone basic crypto module, apeos c7070 firmware, apeos c6570 firmware, apeos c5570 firmware, apeos c4570 firmware, apeos c3570 firmware, apeos c3070 firmware, apeos c7070 g firmware, apeos c6570 g firmware, apeos c5570 g firmware, apeos c4570 g firmware, apeos c3570 g firmware
- Weakness
- CWE-330
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.