CVE-2020-26508

2020-11-1618:49:16

mitre

www.cve.org

canon

colorwave 3500

smb credentials

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

The WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve stored SMB credentials via the export feature, even though these are intentionally inaccessible in the UI.

References

www.syss.de/pentest-blog/