Security Alert: Fuji Xerox MFPs at risk

July 31, 2020

Fuji Xerox released information of the potential security risks on their multifunction and office printers and intends to issue a firmware update.

In a notice to its customers, Fuji Xerox said: “Recently we have found that potential security risks may exist (Ripple20: CVE-2020-11896, etc.) for some of our multi-function and office printers (please refer to the list of the affected models as below). We are in the process of preparing new firmware, and plan to release it as shown below.”

In case of any malicious attempt, non-authorised users may extract few tens of data bytes from these affected models connected to the network. Fuji Xerox said it has already confirmed that customer information like print data cannot be extracted. The OEM recommends to users to update affected models with the new firmware.

Affected products and release plan of fixed firmware

• DocuPrint P375 d (Late August 2020)
• DocuPrint P375 dw (Late August 2020)
• DocuPrint M375 df (Late August 2020)
• DocuPrint M375 z (Late August 2020)
• DocuPrint P378 d (Late August 2020)
• DocuPrint P378 dw (Late August 2020)
• DocuPrint M378 d (Late August 2020)
• DocuPrint M378 df (Late August 2020)
• DocuPrint P285 dw (Mid September 2020)
• DocuPrint P288 dw (Mid September 2020)
• DocuPrint M285 z (Mid September 2020)
• DocuPrint M288 dw (Mid September 2020)
• DocuPrint M288 z (Mid September 2020)
• DocuPrint P235 d (Mid September 2020)
• DocuPrint M235 dw (Mid September 2020)
• DocuPrint M235 z (Mid September 2020)
• DocuPrint P275 dw (Mid September 2020)
• DocuPrint M275 z (Mid September 2020)
• DocuPrint P225 d (Early September 2020)
• DocuPrint M225 dw (Early September 2020)
• DocuPrint M225 z (Early September 2020)
• DocuPrint P265 dw (Early September 2020)
• DocuPrint M265 z (Early September 2020)
• DocuPrint P268 d (Early September 2020)
• DocuPrint P268 dw (Early September 2020)
• DocuPrint M268 dw (Early September 2020)
• DocuPrint M268 z (Early September 2020)
• DocuPrint P115 w (Early October 2020)
• DocuPrint P118 w (Early October 2020)
• DocuPrint M115 w (Early October 2020)
• DocuPrint M115 fw (Early October 2020)
• DocuPrint M115 z (Early October 2020)
• DocuPrint M118 w (Early October 2020)
• DocuPrint M118 z (Early October 2020)

Categories : Products and Technology

Tags : Firmware Fuji Xerox Security