{"id":"CVE-2022-26320","aliases":["EUVD-2022-30881","GHSA-vgmm-r7wp-gmv8"],"status":"published","title":"The Rambus SafeZone Basic Crypto Module, as used in certain Fujifilm (formerly Fuji Xerox)...","description":"The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00975,"percentile":0.62333,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-330"],"published":"2022-03-14T17:28:04Z","modified":"2026-06-17T04:34:58Z","products":[{"vendor":"canon","product":"imageprograf_firmware"},{"vendor":"canon","product":"imagerunner_firmware"},{"vendor":"fujifilm","product":"apeos_c3070_firmware"},{"vendor":"fujifilm","product":"apeos_c3070_g_firmware"},{"vendor":"fujifilm","product":"apeos_c325_dw_firmware"},{"vendor":"fujifilm","product":"apeos_c325_z_firmware"},{"vendor":"fujifilm","product":"apeos_c328_df_firmware"},{"vendor":"fujifilm","product":"apeos_c328_dw_firmware"},{"vendor":"fujifilm","product":"apeos_c3570_firmware"},{"vendor":"fujifilm","product":"apeos_c3570_g_firmware"},{"vendor":"fujifilm","product":"apeos_c4570_firmware"},{"vendor":"fujifilm","product":"apeos_c4570_g_firmware"},{"vendor":"fujifilm","product":"apeos_c5570_firmware"},{"vendor":"fujifilm","product":"apeos_c5570_g_firmware"},{"vendor":"fujifilm","product":"apeos_c6570_firmware"},{"vendor":"fujifilm","product":"apeos_c6570_g_firmware"},{"vendor":"fujifilm","product":"apeos_c6580_firmware"},{"vendor":"fujifilm","product":"apeos_c7070_firmware"},{"vendor":"fujifilm","product":"apeos_c7070_g_firmware"},{"vendor":"fujifilm","product":"apeos_c7580_firmware"},{"vendor":"fujifilm","product":"apeos_c8180_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_4021_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_5021_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c2273_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c3321_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c3372_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c3373_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c4421_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c4473_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c5573_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c5588_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c6688_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c6773_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c7773_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_c7788_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_cp4421_firmware"},{"vendor":"fujifilm","product":"apeosport-vii_p4021_firmware"},{"vendor":"fujifilm","product":"apeosport_2560_firmware"},{"vendor":"fujifilm","product":"apeosport_2560_g_firmware"},{"vendor":"fujifilm","product":"apeosport_3060_firmware"},{"vendor":"fujifilm","product":"apeosport_3060_g_firmware"},{"vendor":"fujifilm","product":"apeosport_3560_firmware"},{"vendor":"fujifilm","product":"apeosport_3560_g_firmware"},{"vendor":"fujifilm","product":"apeosport_4570_firmware"},{"vendor":"fujifilm","product":"apeosport_4570_g_firmware"},{"vendor":"fujifilm","product":"apeosport_5570_firmware"},{"vendor":"fujifilm","product":"apeosport_5570_g_firmware"},{"vendor":"fujifilm","product":"apeosport_c2060_firmware"},{"vendor":"fujifilm","product":"apeosport_c2060_g_firmware"},{"vendor":"fujifilm","product":"apeosport_c2560_firmware"},{"vendor":"fujifilm","product":"apeosport_c2560_g_firmware"},{"vendor":"fujifilm","product":"apeosport_c3060_firmware"},{"vendor":"fujifilm","product":"apeosport_c3070_firmware"},{"vendor":"fujifilm","product":"apeosport_c3070_g_firmware"},{"vendor":"fujifilm","product":"apeosport_c3570_firmware"},{"vendor":"fujifilm","product":"apeosport_c3570_g_firmware"},{"vendor":"fujifilm","product":"apeosport_c4570_firmware"},{"vendor":"fujifilm","product":"apeosport_c4570_g_firmware"},{"vendor":"fujifilm","product":"apeosport_c5570_firmware"},{"vendor":"fujifilm","product":"apeosport_c5570_g_firmware"},{"vendor":"fujifilm","product":"apeosport_c6570_firmware"},{"vendor":"fujifilm","product":"apeosport_c6570_g_firmware"},{"vendor":"fujifilm","product":"apeosport_c7070_firmware"},{"vendor":"fujifilm","product":"apeosport_c7070_g_firmware"},{"vendor":"fujifilm","product":"apeosport_print_c5570_firmware"},{"vendor":"fujifilm","product":"apeosprint_c325_dw_firmware"},{"vendor":"fujifilm","product":"apeosprint_c328_dw_firmware"},{"vendor":"fujifilm","product":"apeosprint_c328_firmware"},{"vendor":"fujifilm","product":"apeospro_c650_firmware"},{"vendor":"fujifilm","product":"apeospro_c750_firmware"},{"vendor":"fujifilm","product":"apeospro_c810_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c2273_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c3372_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c3373_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c4473_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c5573_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c5588_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c6673_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c6688_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c7773_firmware"},{"vendor":"fujifilm","product":"docucentre-vii_c7788_firmware"},{"vendor":"fujifilm","product":"docuprint_3205_d_firmware"},{"vendor":"fujifilm","product":"docuprint_3208_d_firmware"},{"vendor":"fujifilm","product":"docuprint_3505_d_firmware"},{"vendor":"fujifilm","product":"docuprint_3508_d_firmware"},{"vendor":"fujifilm","product":"docuprint_4405_d_firmware"},{"vendor":"fujifilm","product":"docuprint_4408_d_firmware"},{"vendor":"fujifilm","product":"docuprint_c2555_d_firmware"},{"vendor":"fujifilm","product":"docuprint_c3555_d_firmware"},{"vendor":"fujifilm","product":"primelink_c9065_firmware"},{"vendor":"fujifilm","product":"primelink_c9070_firmware"},{"vendor":"rambus","product":"safezone_basic_crypto_module"}],"references":[{"url":"https://global.canon/en/support/security/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://fermatattack.secvuln.info","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.fujifilm.com/fbglobal/eng/company/news/notice/2022/0302_rsakey_announce.html","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://www.rambus.com/security/response-center/advisories/rmbs-2021-01/"},{"url":"https://web.archive.org/web/20220922042721/https://safezoneswupdate.com/"},{"url":"https://safezoneswupdate.com","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26320"},{"url":"https://web.archive.org/web/20220922042721/https://safezoneswupdate.com"},{"url":"https://www.rambus.com/security/response-center/advisories/rmbs-2021-01"},{"url":"https://github.com/advisories/GHSA-vgmm-r7wp-gmv8"}],"sources":{"cve":[{"id":"CVE-2022-26320","description":"The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.","status":"published","published":"2022-03-14T17:28:04Z","modified":"2024-10-07T16:04:03.893Z","updated_at":"2026-11-02T14:34:26.293612Z"}],"euvd":[{"id":"EUVD-2022-30881","description":"The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.","status":"published","published":"2022-03-14T17:28:04Z","modified":"2024-10-07T16:04:03Z","updated_at":"2026-11-03T00:27:47.285621Z"}],"ghsa":[{"id":"GHSA-vgmm-r7wp-gmv8","title":"The Rambus SafeZone Basic Crypto Module, as used in certain Fujifilm (formerly Fuji Xerox)...","description":"The Rambus SafeZone Basic Crypto Module, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01 and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.","status":"published","published":"2022-03-15T00:00:53Z","modified":"2024-10-07T18:32:02Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T14:58:25.780996Z"}],"nvd":[{"id":"CVE-2022-26320","description":"The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization method. This allows efficient calculation of private RSA keys from the public key of a TLS certificate.","status":"published","published":"2022-03-14T18:15:08.123Z","modified":"2026-06-17T04:34:58.39Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T14:07:13.7085Z"}]}}