CVE-2025-48499

Published: Aug 4, 2025

Modified: Aug 7, 2025

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Description

Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printing Protocol) or LPD (Line Printer Daemon) packet may cause a denial-of-service (DoS) condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service (DoS) condition.

Vendor	Product	Versions
FUJIFILM Business Innovation Corp.	DocuPrint CP225 w	affected `01.23.02 and earlier`
FUJIFILM Business Innovation Corp.	DocuPrint CP228 w	affected `01.23.02 and earlier`
FUJIFILM Business Innovation Corp.	DocuPrint CP115 w	affected `01.09.00 and earlier`
FUJIFILM Business Innovation Corp.	DocuPrint CP118 w	affected `01.09.00 and earlier`
FUJIFILM Business Innovation Corp.	DocuPrint CP116 w	affected `01.09.00 and earlier`
FUJIFILM Business Innovation Corp.	DocuPrint CP119 w	affected `01.09.00 and earlier`
FUJIFILM Business Innovation Corp.	DocuPrint CM225 fw	affected `01.12.02 and earlier`
FUJIFILM Business Innovation Corp.	DocuPrint CM228 fw	affected `01.12.02 and earlier`
FUJIFILM Business Innovation Corp.	DocuPrint CM115 w	affected `01.09.01 and earlier`
FUJIFILM Business Innovation Corp.	DocuPrint CM118 w	affected `01.09.01 and earlier`
FUJIFILM Business Innovation Corp.	Apoes 2150 N	affected `01.00.47 and earlier`
FUJIFILM Business Innovation Corp.	Apoes 2350 NDA	affected `01.00.47 and earlier`
FUJIFILM Business Innovation Corp.	Apoes 2150 ND	affected `01.00.47 and earlier`
FUJIFILM Business Innovation Corp.	Apoes 2150 NDA	affected `01.00.47 and earlier`

Weaknesses (CWE)

CWE-787

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

References

https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0804_announce.html

https://jvn.jp/en/vu/JVNVU93897456/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-48499

Description

Affected Products

Weaknesses (CWE)

CVSS v3.1 Details

References