CVE-2022-26320 Weak cryptography in n/a
Weak RSA key generation in printer firmware allows attackers to derive private keys and decrypt TLS traffic or impersonate devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-26320?
CVE-2022-26320 is a critical vulnerability in n/a, published on 14 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
Weakness: CWE-330
Which versions are affected by CVE-2022-26320?
It affects 92 products.
Products include Canon Imageprograf Firmware, Canon Imagerunner Firmware, Fujifilm Apeos C3070 Firmware, Fujifilm Apeos C3070 G Firmware, Fujifilm Apeos C325 Dw Firmware, Fujifilm Apeos C325 Z Firmware and 86 more.
How do I fix CVE-2022-26320?
No fix has been published for CVE-2022-26320 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-26320 being exploited?
There is no known exploitation of CVE-2022-26320 in the wild and no public exploit code.
Sources
Also known as CVE-2022-26351, GHSA-vgmm-r7wp-gmv8.