CVE-2022-26320
The Rambus SafeZone Basic Crypto Module, as used in certain Fujifilm (formerly Fuji Xerox)...
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
9.1
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
- Record
CVE-2022-26320- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-330
- Updated
- 2026-11-02
CVE List No score
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
- Record
CVE-2022-26320- Updated
- 2026-11-02
EUVDEUVD-2022-30881 No score
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
- Record
EUVD-2022-30881- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vgmm-r7wp-gmv8
9.1
The Rambus SafeZone Basic Crypto Module, as used in certain Fujifilm (formerly Fuji Xerox)...
The Rambus SafeZone Basic Crypto Module, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01 and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.
- Record
GHSA-vgmm-r7wp-gmv8- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-330
- Updated
- 2026-11-02
Affected products
- rambus safezone basic crypto module
- canon imageprograf firmware
- canon imagerunner firmware
- fujifilm apeos c3070 firmware
- fujifilm apeos c3070 g firmware
- fujifilm apeos c325 dw firmware
- fujifilm apeos c325 z firmware
- fujifilm apeos c328 df firmware
- fujifilm apeos c328 dw firmware
- fujifilm apeos c3570 firmware
- fujifilm apeos c3570 g firmware
- fujifilm apeos c4570 firmware
Show 80 moreShow less
- fujifilm apeos c4570 g firmware
- fujifilm apeos c5570 firmware
- fujifilm apeos c5570 g firmware
- fujifilm apeos c6570 firmware
- fujifilm apeos c6570 g firmware
- fujifilm apeos c6580 firmware
- fujifilm apeos c7070 firmware
- fujifilm apeos c7070 g firmware
- fujifilm apeos c7580 firmware
- fujifilm apeos c8180 firmware
- fujifilm apeosport-vii 4021 firmware
- fujifilm apeosport-vii 5021 firmware
- fujifilm apeosport-vii c2273 firmware
- fujifilm apeosport-vii c3321 firmware
- fujifilm apeosport-vii c3372 firmware
- fujifilm apeosport-vii c3373 firmware
- fujifilm apeosport-vii c4421 firmware
- fujifilm apeosport-vii c4473 firmware
- fujifilm apeosport-vii c5573 firmware
- fujifilm apeosport-vii c5588 firmware
- fujifilm apeosport-vii c6688 firmware
- fujifilm apeosport-vii c6773 firmware
- fujifilm apeosport-vii c7773 firmware
- fujifilm apeosport-vii c7788 firmware
- fujifilm apeosport-vii cp4421 firmware
- fujifilm apeosport-vii p4021 firmware
- fujifilm apeosport 2560 firmware
- fujifilm apeosport 2560 g firmware
- fujifilm apeosport 3060 firmware
- fujifilm apeosport 3060 g firmware
- fujifilm apeosport 3560 firmware
- fujifilm apeosport 3560 g firmware
- fujifilm apeosport 4570 firmware
- fujifilm apeosport 4570 g firmware
- fujifilm apeosport 5570 firmware
- fujifilm apeosport 5570 g firmware
- fujifilm apeosport c2060 firmware
- fujifilm apeosport c2060 g firmware
- fujifilm apeosport c2560 firmware
- fujifilm apeosport c2560 g firmware
- fujifilm apeosport c3060 firmware
- fujifilm apeosport c3070 firmware
- fujifilm apeosport c3070 g firmware
- fujifilm apeosport c3570 firmware
- fujifilm apeosport c3570 g firmware
- fujifilm apeosport c4570 firmware
- fujifilm apeosport c4570 g firmware
- fujifilm apeosport c5570 firmware
- fujifilm apeosport c5570 g firmware
- fujifilm apeosport c6570 firmware
- fujifilm apeosport c6570 g firmware
- fujifilm apeosport c7070 firmware
- fujifilm apeosport c7070 g firmware
- fujifilm apeosport print c5570 firmware
- fujifilm apeosprint c325 dw firmware
- fujifilm apeosprint c328 dw firmware
- fujifilm apeosprint c328 firmware
- fujifilm apeospro c650 firmware
- fujifilm apeospro c750 firmware
- fujifilm apeospro c810 firmware
- fujifilm docucentre-vii c2273 firmware
- fujifilm docucentre-vii c3372 firmware
- fujifilm docucentre-vii c3373 firmware
- fujifilm docucentre-vii c4473 firmware
- fujifilm docucentre-vii c5573 firmware
- fujifilm docucentre-vii c5588 firmware
- fujifilm docucentre-vii c6673 firmware
- fujifilm docucentre-vii c6688 firmware
- fujifilm docucentre-vii c7773 firmware
- fujifilm docucentre-vii c7788 firmware
- fujifilm docuprint 3205 d firmware
- fujifilm docuprint 3208 d firmware
- fujifilm docuprint 3505 d firmware
- fujifilm docuprint 3508 d firmware
- fujifilm docuprint 4405 d firmware
- fujifilm docuprint 4408 d firmware
- fujifilm docuprint c2555 d firmware
- fujifilm docuprint c3555 d firmware
- fujifilm primelink c9065 firmware
- fujifilm primelink c9070 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-26320 is a critical vulnerability (CVSS 9.1) in Rambus Safezone Basic Crypto Module, published March 14, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 62nd percentile. No source names a fixed version.
References
global.canon/en/support/security/index.html
fermatattack.secvuln.info
fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.html
rambus.com/security/response-center/advisories/rmbs-2021-01
web.archive.org/web/20220922042721/https://safezoneswupdate.com
safezoneswupdate.com
nvd.nist.gov/vuln/detail/CVE-2022-26320
github.com/advisories/GHSA-vgmm-r7wp-gmv8