CVE-2024-12782

Summary

CVE-2024-12782 is a newly disclosed critical vulnerability affecting the Fujifilm Apeos C3070, C5570, and C6580 models with software versions up to 24.8.28. This issue lies within the Web Interface component and involves unknown code in the /home/index.html#hashHome file. The vulnerability grants improper authorization to an attacker, enabling them to initiate a remote exploit. Although the exploit has been made public, the authenticity of the vulnerability is yet to be confirmed by Fujifilm. The vendor has expressed doubts about the reported issue, stating that the behaviors in question may be intended or not reproduced.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.