CVE-2022-26320: Canon Imageprograf Firmware

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.

Affected products

  • Canon Imageprograf Firmware: before 2020-03-14 (fixed in 2020-03-14)
  • Canon Imagerunner Firmware: up to and including 2020-03-14
  • Fujifilm Apeos c3070 Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c3070 G Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c325 Dw Firmware: before 202112062053 (fixed in 202112062053)
  • Fujifilm Apeos c325 Z Firmware: before 202112062053 (fixed in 202112062053)
  • Fujifilm Apeos c328 Df Firmware: before 202112062053 (fixed in 202112062053)
  • Fujifilm Apeos c328 Dw Firmware: before 202112062053 (fixed in 202112062053)
  • Fujifilm Apeos c3570 Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c3570 G Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c4570 Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c4570 G Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c5570 Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c5570 G Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c6570 Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c6570 G Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c6580 Firmware: before 1.1.6 (fixed in 1.1.6)
  • Fujifilm Apeos c7070 Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c7070 G Firmware: before 1.1.7 (fixed in 1.1.7)
  • Fujifilm Apeos c7580 Firmware: before 1.1.6 (fixed in 1.1.6)
  • Fujifilm Apeos c8180 Firmware: before 1.1.6 (fixed in 1.1.6)
  • Fujifilm Apeosport-Vii 4021 Firmware: before 1.60.9 (fixed in 1.60.9)
  • Fujifilm Apeosport-Vii 5021 Firmware: before 1.60.9 (fixed in 1.60.9)
  • Fujifilm Apeosport-Vii c2273 Firmware: before 1.60.2 (fixed in 1.60.2)
  • Fujifilm Apeosport-Vii c3321 Firmware: before 1.60.9 (fixed in 1.60.9)
  • and 67 more

Published 2022-03-14. Last modified 2026-06-17.