This vulnerability (CWE-22) affects the web management interface of multiple Apeos multifunction devices and printers from Fujifilm Business Innovation Corp., including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, and other related products. It arises from improper limitation of a pathname to a restricted directory, enabling path traversal attacks via maliciously crafted requests. Exploitation requires high privileges and does not involve user interaction. The vulnerability could trigger unintended processing on the affected device.

An attacker with high privileges on the network interface of the affected device could exploit this vulnerability to perform unauthorized path traversal, potentially accessing or manipulating files outside intended directories. This could lead to unauthorized information disclosure or modification within the device's file system. However, the vulnerability does not require user interaction and has a medium severity impact.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the device's web management interface to trusted administrators only and monitor for suspicious activity.