700 matches found
Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting
Overview Multiple Canon laser printers and small office multifunctional printers contain a stored cross-site scripting vulnerability CWE-79. Murashima Masahiro of IERAE SECURITY INC. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...
Canon 多款产品跨站脚本漏洞
Canon Mf and others are products of Canon Japan.Canon Mf is a line of multifunction printers.Canon Lbp is a line of compact printers.Canon ImageRunner is a line of all-in-one black-and-white printers.Canon Mf is a line of multifunction printers.Canon Lbp is a line of compact printers. A cross-sit...
JVN#64806328: Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting
Multiple Canon laser printers and small office multifunctional printers contain a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is accessing the product settings screen. Solution Update the firmware Update the...
Canon LBP223 Licensing Issue Vulnerability
Canon LBP223 is a printer from Canon Japan. The Canon LBP223 printer has an authorization issue vulnerability, which stems from the fact that the LBP223 printer system management mode login does not require an account password or PIN. attackers can use this vulnerability to enter the background a...
CVE-2021-43471
In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a denial of service vulnerability...
CVE-2021-43471
In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a denial of service vulnerability...
Denial of service
In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a denial of service vulnerability...
CVE-2021-43471
In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a denial of service vulnerability...
CVE-2021-43471
Affected product: Canon LBP223 printers. Vulnerability: System Manager Mode login accepts no password or PIN, enabling an attacker to gain access and remotely shut down the device, causing a denial-of-service. Root cause: Lack of authentication for System Manager Mode login. Impact: Network-acces...
Canon LBP223 安全漏洞
Canon LBP223 is a printer from Canon Japan. The Canon LBP223 printer has an authorization issue vulnerability, which stems from the fact that the LBP223 printer system management mode login does not require an account password or PIN. attackers can use this vulnerability to enter the background a...
OSV-2021-1527 UNKNOWN READ in exif_mnote_data_canon_load
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40623 Crash type: UNKNOWN READ Crash state: exifmnotedatacanonload exifmnotedataload interpretmakernote...
biz.canon-bs.co.kr Cross Site Scripting vulnerability OBB-2141856
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2021-38154
Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...
Code injection
Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...
CVE-2021-38154
Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...
CVE-2021-38154
Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...
CVE-2021-38154
Canon imageRUNNER ADVANCE/Canon devices (2012–2020), e.g., iR-ADV C5250, expose an unauthenticated risk when Catwalk Server is accessible via HTTP: remote attackers can modify the device’s e-mail address settings, causing sensitive data (e.g., faxes) to be sent to attacker-controlled e-mail addre...
Canon 多款产品信息泄露漏洞
The Canon imageRUNNER ADVANCE iR-ADV C5250 is a multifunctional office device from Canon Japan. An information disclosure vulnerability exists in multiple Canon products, which originates in certain Canon devices manufactured from 2012 through 2020 such as the imageRUNNER ADVANCE iR-ADV C5250, an...
VulnCheck KEV: CVE-2021-38154
Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker...
PT-2021-21971
Name of the Vulnerable Software and Affected Versions: Canon devices manufactured in 2012 through 2020, such as imageRUNNER ADVANCE iR-ADV C5250 Description: The issue allows remote attackers to modify an e-mail address setting when Catwalk Server is enabled for HTTP access, causing the device to...