Information from Fuji Xerox on its Products and the Ransomware WannaCry

June 14, 2017

The following information is from Fuji Xerox regarding its products and any impact by a ransomware called WannaCry (also known as WannaCrypt, Wanna Cryptor, WannaCryptor, Wcry, etc.), as well as suggested workarounds.

Fuji Xerox products will not be infected by WannaCry

WannaCry exploits a Windows vulnerability to infect targets. Once the target is infected, the malware spreads to other computers running on Windows. Fuji Xerox’s MFDs (multifunctional devices), MFPs (multifunctional printers), scanners, printers, and wide-format MFDs do not have Windows installed; therefore, will not be infected by or spread WannaCry.

Countermeasure against WannaCry – disable SMBv1

As the countermeasure against WannaCry, Microsoft recommends installing their security updates, as well as disabling SMBv1 as an additional layer of protection.
Please refer to the following for detailed information from Microsoft:
https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

No impact to Fuji Xerox products that use SMBv2

If you are disabling SMBv1 on a computer that uses server message block (SMB) to communicate with Fuji Xerox’s MFDs, MFPs, scanners, printers, or wide-format MFDs, please be notified that the below list of Fuji Xerox products will not be impacted in any way, as these products use SMBv2:

<Digital Color Multifunction Devices>

  • ApeosPort-VI C7771 / C6671 / C5571 / C4471 / C3371 / C3370 / C2271
  • DocuCentre-VI C7771 / C6671 / C5571 / C4471 / C3371 / C3370 / C2271
  • ApeosPort-V C7776 / C6676 / C5576 / C4476 / C3376 / C3374 / C2276
  • DocuCentre-V C7776 / C6676 / C5576 / C4476 / C3376 / C3374 / C2276
  • ApeosPort-V C7775 / C6675 / C5575 / C4475 / C3375 / C3373 / C2275
  • DocuCentre-V C7775 / C6675 / C5575 / C4475 / C3375 / C3373 / C2275
  • ApeosPort-V C7785 / C6685 / C5585
  • DocuCentre-V C7785 / C6685 / C5585
  • ApeosPort-V C7780 / C6680 / C5580
  • DocuCentre-V C7780 / C6680 / C5580
  • DocuCentre-V C2265 / C2263
  • DocuCentre SC2020
  • ApeosPort-V C3320

<Digital Black & White Multifunction Devices>

  • ApeosPort-V 7080 / 6080
  • DocuCentre-V 7080 / 6080
  • ApeosPort-V 5070 / 4070
  • DocuCentre-V 5070 / 4070
  • ApeosPort-V 3065 / 3060 / 2060
  • DocuCentre-V 3065 / 3060 / 2060
  • ApeosPort-V 4020

<Printers>

  • DocuPrint 5105 d
  • DocuPrint CM415 AP
  • DocuPrint CM318 / 315 z
  • DocuPrint CM228 / 225 fw
  • DocuPrint CM118 / 115 w
  • DocuPrint M465 AP

<Production Systems>

  • Versant 3100 Press
  • Versant 2100 Press
  • Versant 180 Press
  • Versant 80 Press

<Wide Format Plotters/Multifunctions>

  • DocuWide 3035
  • DocuWide 6055 / 6035
  • DocuWide C842

Workarounds for those customers with Fuji Xerox products that use SMBv1 only

By disabling SMBv1 on your computer, some of our products will be unable to perform certain scanner functions. These include Scan to PC, automatically transfer documents in a private mailbox to the computer via a job flow, or print using SMB protocols.
Also, if you have set SMB authentication for external authentication, authentication will become impossible.

The products listed above as supporting SMBv2 remain unaffected.
Please refer to the workarounds suggested below.

  • NOTE You may need to consult your system administrator, or your Fuji Xerox documentation for further information.

Workarounds for scanner (scan to PC) using SMB

  • Change the transfer protocol of scanner (Scan to PC) to FTP.

    You will need to set up the FTP service on the computer to which you are saving.

  • Scan and store to WSD instead

    Scan via an operation from your computer, or via an operation on the MFD, and save the scanned data to a designated computer.

  • Use scan-to-email instead

    When you scan a document on your MFD, an email will be sent to a computer with the scanned document as an attachment. You will need to perform an extra setup in order to register the email address of your MFD. There is an upper limit to the size of the scanned file which can be sent via scan-to-email, so the scanned document may be split over more than one email.

  • Use scan-to-URL instead

    Operate in authentication mode. The scanned data is stored in the MFD and an email including the URL that points to the stored data in the MFD will be sent to an authenticated user.

  • Use scan-to-mailbox instead

    Scan and save documents to a mailbox in the MFD, and the documents can be retrieved to the computer. You can retrieve these documents using CentreWare Internet Service, Network Scanner Utility 2 or 3, or DocuWorks.

Workaround for automatically transferring documents in a mailbox to a computer via a job flow

  • Use an FTP transfer

    You will need to set up the FTP service on the computer to which you are saving.

  • Use email transfer

    You will need to perform an extra setup in order to register the email address of your MFD. There is an upper limit to the size of the scanned file which can be sent via scan-to-email, so the scanned document may be split over more than one email.

  • Use Network Scanner Utility to retrieve documents.

    Network Scanner Utility enables you to retrieve documents from a private mailbox either manually or automatically via periodic polling. You can download Network Scanner Utility3 from the following site.
    https://www.fxap.com.sg/product/softwaredownload/NSU3/nsu3_register.jsp

  • Note If you disabled SMBv1 on your computer and are using the paperless fax receiving feature, you will not be able to automatically transfer an incoming fax document to a computer via a job flow using SMB. Please change your process to an alternate method.

Workaround for printing using SMB

  • Use TCP/IP (LPD/Port9100)

Workaround for an external authentication using SMB

  • Use Kerberos authentication
  • Use LDAP authentication
  • Use ApeosWare Management Suite authentication, a software from Fuji Xerox

Each product supports a different set of functions. Please refer to the product’s Administrator Guide for further details.

For print servers that have Windows installed as an embedded OS

We will be publishing information about the countermeasures against WannaCry for print servers in early June on the following URL:

GX Print Server Drivers & Downloads
http://onlinesupport.fujixerox.com/processDriverForm.do?ctry_code=AU&lang_code=en&d_lang=en&corp_pid=GX+Server&rts=null&model=GX+Print+Server&type_id=5&lang_list=en

Microsoft Security Bulletin MS17-010 - Critical
https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

If you have any inquiries regarding the matter above, please contact your sales representative or our customer support center.