Fujifilm Business Innovation Corp Apeos 3060 2560 1860 Japan model up to 1.1.3 Web Management Interface path traversal

Summaryinfo

A vulnerability, which was classified as critical, has been found in Fujifilm Business Innovation Corp Apeos 3060 2560 1860 Japan model, Apeos 3061 2561 2061 Japan model, Apeos 4570 3570 Japan model, Apeos 5330 Japan model, Apeos 6340 Japan model, Apeos 7580 6580 5580 Japan model, Apeos C2360 C2060 Japan model, Apeos C3061 C2561 C2061 Japan model, Apeos C3567 C3067 C2567 Japan model, Apeos C4030, C3530 Japan model, Apeos C5240 Japan model, Apeos C7070 C6570 C5570 C4570 C3570 C3070 C2570 Japan model, Apeos C7071 C6571 C5571 C4571 C3571 C3071 C2571 Japan model, Apeos C8180 C7580 C6580 Japan model, ApeosPrint 4560 S 3960 S 3360 S Japan model, ApeosPrint 4830 4830 JM Japan model, ApeosPrint 6340 Japan model, ApeosPrint C3560 S C3060 S Japan model, ApeosPrint C4030 C3530 Japan model, ApeosPrint C5240 Japan model, ApeosPrint C5570 C4570 Japan model, ApeosPro C810 C750 C650 Japan model, Revoria Press E1136 E1125, E1110 E1100 Japan model, Revoria Press E1136P, E1125P, E1110P Japan model, Revoria Press EC1100 Japan model, Revoria Press EC2100S EC2100 Japan model, Revoria Press SC285S SC285 Japan model, RevoriaPress SC180 SC170 Japan model, Apeos 3560 3060 2560 Asia Pacific model, Apeos 3561 3061 2561 Asia Pacific model, Apeos 5330 4830 Asia Pacific model, Apeos 5570 4570 Asia Pacific model, Apeos 6340 Asia Pacific model, 6580 Asia Pacific model, Apeos C3060 C2560 C2060 Asia Pacific model, C2061 Asia Pacific model, C2567 Asia Pacific model, C3530 Asia Pacific model, Apeos C5240 Asia Pacific model, C2570 Asia Pacific model, C2571 Asia Pacific model, C6580 Asia Pacific model, 3360 S Asia Pacific model, ApeosPrint 5330 Asia Pacific model, ApeosPrint 6340 Asia Pacific model, ApeosPrint C4030 Asia Pacific model, ApeosPrint C5240 Asia Pacific model, ApeosPrint C5570 Asia Pacific model, C650 Asia Pacific model, E1100 Asia Pacific model, Revoria Press EC1100 Asia Pacific model, EC2100 Asia Pacific model, SC285 Asia Pacific model, SC170 Asia Pacific model, 2561 Europe model, Apeos 5330, 4830 Europe model, Apeos 5570, 4570 Europe model, C2060 Europe model, 2560 Europe model, C3530 Europe model, C3070 Europe model, ApeosPrint 5330, ApeosPrint C4030, C650 Europe model, E1125 , E1100 Europe model, Revoria Press EC1100 Europe model, EC2100 Europe model, SC285 Europe model and SC170 Europe model up to 1.1.3. This vulnerability affects unknown code of the component Web Management Interface. This manipulation causes path traversal. This vulnerability is registered as CVE-2026-78249. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability classified as critical was found in Fujifilm Business Innovation Corp Apeos 3060 2560 1860 Japan model, Apeos 3061 2561 2061 Japan model, Apeos 4570 3570 Japan model, Apeos 5330 Japan model, Apeos 6340 Japan model, Apeos 7580 6580 5580 Japan model, Apeos C2360 C2060 Japan model, Apeos C3061 C2561 C2061 Japan model, Apeos C3567 C3067 C2567 Japan model, Apeos C4030, C3530 Japan model, Apeos C5240 Japan model, Apeos C7070 C6570 C5570 C4570 C3570 C3070 C2570 Japan model, Apeos C7071 C6571 C5571 C4571 C3571 C3071 C2571 Japan model, Apeos C8180 C7580 C6580 Japan model, ApeosPrint 4560 S 3960 S 3360 S Japan model, ApeosPrint 4830 4830 JM Japan model, ApeosPrint 6340 Japan model, ApeosPrint C3560 S C3060 S Japan model, ApeosPrint C4030 C3530 Japan model, ApeosPrint C5240 Japan model, ApeosPrint C5570 C4570 Japan model, ApeosPro C810 C750 C650 Japan model, Revoria Press E1136 E1125, E1110 E1100 Japan model, Revoria Press E1136P, E1125P, E1110P Japan model, Revoria Press EC1100 Japan model, Revoria Press EC2100S EC2100 Japan model, Revoria Press SC285S SC285 Japan model, RevoriaPress SC180 SC170 Japan model, Apeos 3560 3060 2560 Asia Pacific model, Apeos 3561 3061 2561 Asia Pacific model, Apeos 5330 4830 Asia Pacific model, Apeos 5570 4570 Asia Pacific model, Apeos 6340 Asia Pacific model, 6580 Asia Pacific model, Apeos C3060 C2560 C2060 Asia Pacific model, C2061 Asia Pacific model, C2567 Asia Pacific model, C3530 Asia Pacific model, Apeos C5240 Asia Pacific model, C2570 Asia Pacific model, C2571 Asia Pacific model, C6580 Asia Pacific model, 3360 S Asia Pacific model, ApeosPrint 5330 Asia Pacific model, ApeosPrint 6340 Asia Pacific model, ApeosPrint C4030 Asia Pacific model, ApeosPrint C5240 Asia Pacific model, ApeosPrint C5570 Asia Pacific model, C650 Asia Pacific model, E1100 Asia Pacific model, Revoria Press EC1100 Asia Pacific model, EC2100 Asia Pacific model, SC285 Asia Pacific model, SC170 Asia Pacific model, 2561 Europe model, Apeos 5330, 4830 Europe model, Apeos 5570, 4570 Europe model, C2060 Europe model, 2560 Europe model, C3530 Europe model, C3070 Europe model, ApeosPrint 5330, ApeosPrint C4030, C650 Europe model, E1125 , E1100 Europe model, Revoria Press EC1100 Europe model, EC2100 Europe model, SC285 Europe model and SC170 Europe model up to 1.1.3. Affected by this vulnerability is an unknown functionality of the component Web Management Interface. The manipulation with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing.

The advisory is shared at fujifilm.com. This vulnerability is known as CVE-2026-78249 since 08/24/2026. The exploitation appears to be easy. The attack can be launched remotely. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/01/2026). MITRE ATT&CK project uses the attack technique T1006 for this issue.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Fujifilm Business Innovation Corp

Name

• 2560 Europe model
• 2561 Europe model
• 3360 S Asia Pacific model
• 4570 Europe model
• 4830 Europe model
• 6580 Asia Pacific model
• Apeos 3060 2560 1860 Japan model
• Apeos 3061 2561 2061 Japan model
• Apeos 3560 3060 2560 Asia Pacific model
• Apeos 3561 3061 2561 Asia Pacific model
• Apeos 4570 3570 Japan model
• Apeos 5330
• Apeos 5330 4830 Asia Pacific model
• Apeos 5330 Japan model
• Apeos 5570
• Apeos 5570 4570 Asia Pacific model
• Apeos 6340 Asia Pacific model
• Apeos 6340 Japan model
• Apeos 7580 6580 5580 Japan model
• Apeos C2360 C2060 Japan model
• Apeos C3060 C2560 C2060 Asia Pacific model
• Apeos C3061 C2561 C2061 Japan model
• Apeos C3567 C3067 C2567 Japan model
• Apeos C4030
• Apeos C5240 Asia Pacific model
• Apeos C5240 Japan model
• Apeos C7070 C6570 C5570 C4570 C3570 C3070 C2570 Japan model
• Apeos C7071 C6571 C5571 C4571 C3571 C3071 C2571 Japan model
• Apeos C8180 C7580 C6580 Japan model
• ApeosPrint 4560 S 3960 S 3360 S Japan model
• ApeosPrint 4830 4830 JM Japan model
• ApeosPrint 5330
• ApeosPrint 5330 Asia Pacific model
• ApeosPrint 6340 Asia Pacific model
• ApeosPrint 6340 Japan model
• ApeosPrint C3560 S C3060 S Japan model
• ApeosPrint C4030
• ApeosPrint C4030 Asia Pacific model
• ApeosPrint C4030 C3530 Japan model
• ApeosPrint C5240 Asia Pacific model
• ApeosPrint C5240 Japan model
• ApeosPrint C5570 Asia Pacific model
• ApeosPrint C5570 C4570 Japan model
• ApeosPro C810 C750 C650 Japan model
• C650 Asia Pacific model
• C650 Europe model
• C2060 Europe model
• C2061 Asia Pacific model
• C2567 Asia Pacific model
• C2570 Asia Pacific model
• C2571 Asia Pacific model
• C3070 Europe model
• C3530 Asia Pacific model
• C3530 Europe model
• C3530 Japan model
• C6580 Asia Pacific model
• E1100 Asia Pacific model
• E1100 Europe model
• E1110 E1100 Japan model
• E1110P Japan model
• E1125
• E1125P
• EC2100 Asia Pacific model
• EC2100 Europe model
• Revoria Press E1136 E1125
• Revoria Press E1136P
• Revoria Press EC1100 Asia Pacific model
• Revoria Press EC1100 Europe model
• Revoria Press EC1100 Japan model
• Revoria Press EC2100S EC2100 Japan model
• RevoriaPress SC180 SC170 Japan model
• Revoria Press SC285S SC285 Japan model
• SC170 Asia Pacific model
• SC170 Europe model
• SC285 Asia Pacific model
• SC285 Europe model

Version

• 1.1.0
• 1.1.1
• 1.1.2
• 1.1.3

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion