CVE-2019-5999

🗓️ 06 Aug 2019 18:41:11Reported by jpcertType

CVE-2019-5999 Buffer overflow in PTP of EOS series digital cameras and PowerShot cameras allows network attacker to execute arbitrary code via blerequest command

Reporter	Title	Published	Views	Family All 10
Check Point Advisories	DSLR Cameras PTP/IP Multiple Buffer Overflow Vulnerabilities (CVE-2019-5994; CVE-2019-5999; CVE-2019-6000)	6 Aug 201900:00	–	checkpoint_advisories
Cvelist	CVE-2019-5999	6 Aug 201918:41	–	cvelist
EUVD	EUVD-2019-15567	7 Oct 202500:30	–	euvd
NVD	CVE-2019-5999	6 Aug 201919:15	–	nvd
OSV	CVE-2019-5999	6 Aug 201919:15	–	osv
Prion	Buffer overflow	6 Aug 201919:15	–	prion
RedhatCVE	CVE-2019-5999	22 May 202510:30	–	redhatcve
The Hacker News	Canon DSLR Cameras Can Be Hacked With Ransomware Remotely	12 Aug 201908:25	–	thn
The Hacker News	Canon DSLR Cameras Can Be Hacked With Ransomware Remotely	12 Aug 201908:25	–	thn
ThreatPost	DEF CON 2019: Picture Perfect Hack of a Canon EOS 80D DSLR	11 Aug 201918:00	–	threatpost

NVD

Node

canon eos-1d_x_firmwareRange≤2.1.0

AND

canon eos-1d_xMatch-

Node

canon eos-1d_x_mkii_firmwareRange≤1.1.6

AND

canon eos-1d_x_mkiiMatch-

Node

canon eos-1d_c_firmwareRange≤1.4.1

AND

canon eos-1d_cMatch-

Node

canon eos_5d_mark_iii_firmwareRange≤1.3.5

AND

canon eos_5d_mark_iiiMatch-

Node

canon eos_5d_mark_iv_firmwareRange≤1.2.0

AND

canon eos_5d_mark_ivMatch-

Node

canon eos_5ds_firmwareRange≤1.1.2

AND

canon eos_5dsMatch-

Node

canon eos_5ds_r_firmwareRange≤1.1.2

AND

canon eos_5ds_rMatch-

Node

canon eos_6d_firmwareRange≤1.1.8

AND

canon eos_6dMatch-

Node

canon eos_7d_mark_ii_firmwareRange≤1.1.2

AND

canon eos_7d_mark_iiMatch-

Node

canon eos_70d_firmwareRange≤1.1.2

AND

canon eos_70dMatch-

Node

canon eos_80d_firmwareRange≤1.0.2

AND

canon eos_80dMatch-

Node

canon eos_kiss_x7i_firmwareRange≤1.1.5

AND

canon eos_kiss_x7iMatch-

Node

canon eos_d_rebel_t5i_firmwareRange≤1.1.5

AND

canon eos_d_rebel_t5iMatch-

Node

canon eos_700d_firmwareRange≤1.1.5

AND

canon eos_700dMatch-

Node

canon eos_kiss_x8i_firmwareRange≤1.0.0

AND

canon eos_kiss_x8iMatch-

Node

canon eos_d_rebel_t6i_firmwareRange≤1.0.0

AND

canon eos_d_rebel_t6iMatch-

Node

canon eos_750d_firmwareRange≤1.0.0

AND

canon eos_750dMatch-

Node

canon eos_kiss_x9i_firmwareRange≤1.0.1

AND

canon eos_kiss_x9iMatch-

Node

canon eos_d_rebel_t7i_firmwareRange≤1.0.1

AND

canon eos_d_rebel_t7iMatch-

Node

canon eos_800d_firmwareRange≤1.0.1

AND

canon eos_800dMatch-

Node

canon eos_kiss_x7_firmwareRange≤1.0.1

AND

canon eos_kiss_x7Match-

Node

canon eos_d_rebel_sl1_firmwareRange≤1.0.1

AND

canon eos_d_rebel_sl1Match-

Node

canon eos_100d_firmwareRange≤1.0.1

AND

canon eos_100dMatch-

Node

canon eos_kiss_x9_firmwareRange≤1.0.1

AND

canon eos_kiss_x9Match-

Node

canon eos_d_rebel_sl2_firmwareRange≤1.0.1

AND

canon eos_d_rebel_sl2Match-

Node

canon eos_200d_firmwareRange≤1.0.1

AND

canon eos_200dMatch-

Node

canon eos_kiss_x10_firmwareRange≤1.0.1

AND

canon eos_kiss_x10Match-

Node

canon eos_d_rebel_sl3_firmwareRange≤1.0.1

AND

canon eos_d_rebel_sl3Match-

Node

canon eos_200d_firmwareRange≤1.0.1

AND

canon eos_200dMatch-

Node

canon eos_250d_firmwareRange≤1.0.1

AND

canon eos_250dMatch-

Node

canon eos_8000d_firmwareRange≤1.0.0

AND

canon eos_8000dMatch-

Node

canon eos_d_rebel_t6s_firmwareRange≤1.0.0

AND

canon eos_d_rebel_t6sMatch-

Node

canon eos_760d_firmwareRange≤1.0.0

AND

canon eos_760dMatch-

Node

canon eos_9000d_firmwareRange≤1.0.2

AND

canon eos_9000dMatch-

Node

canon eos_77d_firmwareRange≤1.0.2

AND

canon eos_77dMatch-

Node

canon eos_kiss_x70_firmwareRange≤1.0.2

AND

canon eos_kiss_x70Match-

Node

canon eos_d_rebel_t5_firmwareRange≤1.0.2

AND

canon eos_d_rebel_t5Match-

Node

canon eos_1200d_firmwareRange≤1.0.2

AND

canon eos_1200dMatch-

Node

canon eos_d_rebel_t5_re_firmwareRange≤1.0.2

AND

canon eos_d_rebel_t5_reMatch-

Node

canon eos_1200d_mg_firmwareRange≤1.0.2

AND

canon eos_1200d_mgMatch-

Node

canon eos_hi_firmwareRange≤1.0.2

AND

canon eos_hiMatch-

Node

canon eos_kiss_x80_firmwareRange≤1.1.0

AND

canon eos_kiss_x80Match-

Node

canon eos_d_rebel_t6_firmwareRange≤1.1.0

AND

canon eos_d_rebel_t6Match-

Node

canon eos_1300d_firmwareRange≤1.1.0

AND

canon eos_1300dMatch-

Node

canon eos_kiss_x90_firmwareRange≤1.0.0

AND

canon eos_kiss_x90Match-

Node

canon eos_d_rebel_t7_firmwareRange≤1.0.0

AND

canon eos_d_rebel_t7Match-

Node

canon eos_1500d_firmwareRange≤1.0.0

AND

canon eos_1500dMatch-

Node

canon eos_2000d_firmwareRange≤1.0.0

AND

canon eos_2000dMatch-

Node

canon eos_d_rebel_t100_firmwareRange≤1.0.0

AND

canon eos_d_rebel_t100Match-

Node

canon eos_3000d_firmwareRange≤1.0.0

AND

canon eos_3000dMatch-

Node

canon eos_4000d_firmwareRange≤1.0.0

AND

canon eos_4000dMatch-

Node

canon eos_r_firmwareRange≤1.3.0

AND

canon eos_rMatch-

Node

canon eos_rp_firmwareRange≤1.2.0

AND

canon eos_rpMatch-

Node

canon eos_rp_gold_firmwareRange≤1.2.0

AND

canon eos_rp_goldMatch-

Node

canon eos_m2_firmwareRange≤1.0.3

AND

canon eos_m2Match-

Node

canon eos_m3_firmwareRange≤1.2.0

AND

canon eos_m3Match-

Node

canon eos_m5_firmwareRange≤1.0.1

AND

canon eos_m5Match-

Node

canon eos_m6_firmwareRange≤1.0.1

AND

canon eos_m6Match-

Node

canon eos_m6(china)_firmwareRange≤5.0.0

AND

canon eos_m6(china)Match-

Node

canon eos_m10_firmwareRange≤1.1.0

AND

canon eos_m10Match-

Node

canon eos_m100_firmwareRange≤1.0.0

AND

canon eos_m100Match-

Node

canon eos_kiss_m_firmwareRange≤1.0.2

AND

canon eos_kiss_mMatch-

Node

canon eos_m50_firmwareRange≤1.0.2

AND

canon eos_m50Match-

Node

canon powershot_sx740_hs_firmwareRange≤1.0.1

AND

canon powershot_sx740_hsMatch-

Node

canon powershot_sx70_hs_firmwareRange≤1.1.0

AND

canon powershot_sx70_hsMatch-

Node

canon powershot_g5xmark_ii_firmwareRange≤1.0.1

AND

canon powershot_g5xmark_iiMatch-

Node

canon eos_6d_mark_ii_firmwareRange≤1.0.4

AND

canon eos_6d_mark_iiMatch-

[
  {
    "product": "EOS series digital cameras, PowerShot SX740 HS,  PowerShot SX70 HS, and PowerShot G5XmarkⅡ",
    "vendor": "Canon, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "(EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and earlier, EOS KISS X9I / EOS D REBEL T7I / EOS 800D firmware version 1.0.1 and earlier, EOS KISS X7 / EOS D REBEL SL1 / EOS 100D firmware version 1.0.1 and earlier, EOS KISS X9 / EOS D REBEL SL2 / EOS 200D firmware version 1.0.1 and earlier, EOS KISS X10 / EOS D RE ...[truncated*]"
      }
    ]
  }
]

Source	Link
cweb	www.cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.html
canon-europe	www.canon-europe.com/support/product-security/
jvn	www.jvn.jp/en/vu/JVNVU97511331/index.html
usa	www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-cameras
research	www.research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/

21 Nov 2024 04:45Current

9High risk

Vulners AI Score9

CVSS 28.3

CVSS 38.8

EPSS0.00319

CWE-787