{"id":"CVE-2018-16709","aliases":["EUVD-2018-8510","GHSA-4gcj-jpgr-v4r6"],"status":"published","title":"Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375,...","description":"Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02125,"percentile":0.82041,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-09-07T19:00:00Z","modified":"2026-06-17T01:44:40Z","products":[{"vendor":"fujixerox","product":"apeosport-v_5070_firmware"},{"vendor":"fujixerox","product":"apeosport-v_c3375_firmware"},{"vendor":"fujixerox","product":"apeosport-v_c4475_firmware"},{"vendor":"fujixerox","product":"apeosport-v_c5576_firmware"},{"vendor":"fujixerox","product":"apeosport-vi_c3371_firmware"},{"vendor":"fujixerox","product":"docucentre-iv_c2263_firmware"},{"vendor":"fujixerox","product":"docucentre-v_3065_firmware"},{"vendor":"fujixerox","product":"docucentre-v_c2263_firmware"},{"vendor":"fujixerox","product":"docucentre-vi_c2271_firmware"}],"references":[{"url":"https://www.exploit-db.com/exploits/45332/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16709"},{"url":"https://github.com/advisories/GHSA-4gcj-jpgr-v4r6"}],"sources":{"cve":[{"id":"CVE-2018-16709","description":"Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.","status":"published","published":"2018-09-07T19:00:00Z","modified":"2024-09-17T02:11:44.95Z","updated_at":"2026-11-02T14:35:11.072321Z"}],"euvd":[{"id":"EUVD-2018-8510","description":"Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.","status":"published","published":"2018-09-07T19:00:00Z","modified":"2024-09-17T02:11:44Z","updated_at":"2026-11-03T00:28:42.924013Z"}],"ghsa":[{"id":"GHSA-4gcj-jpgr-v4r6","title":"Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375,...","description":"Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.","status":"published","published":"2022-05-13T01:50:26Z","modified":"2023-02-02T05:01:56Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:51:18.541099Z"}],"nvd":[{"id":"CVE-2018-16709","description":"Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.","status":"published","published":"2018-09-07T19:29:00.413Z","modified":"2026-06-17T01:44:40.2Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:38.672108Z"}]}}