Authentication flaw

DISPUTED An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administrator Mode authentication for /tlogin.cgi via vectors involving frame.cgi?page=DevStatus. NOTE: the vendor reportedly responded that this issue occurs when a customer...

CVE-2018-11692

An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administrator Mode authentication for /tlogin.cgi via vectors involving frame.cgi?page=DevStatus. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the...

CVE-2018-11692

CVE-2018-11692 affects Canon LBP6650, LBP3370, LBP3460, and LBP7750C printers. A remote attacker can bypass Administrator Mode authentication for /tlogin.cgi by exploiting vectors involving frame.cgi?page=DevStatus, enabling unauthorized admin access. Public material (Exploit-DB, 0day, OpenVAS) c...

PT-2018-10769 · Canon · Canon Mf210 +1

Name of the Vulnerable Software and Affected Versions: Canon MF210 and MF220 versions affected versions not specified Description: A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for "/login.html" via vectors involving "/port...

us.medical.canon XSS vulnerability

Open Bug Bounty ID: OBB-548298 Description| Value ---|--- Affected Website:| us.medical.canon Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

Fedora 27 : LibRaw (2017-f04296e37e)

Patch for CVE-2017-14348 ---- Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data ---- LibRaw 0.18.3 Fix for CVE-2017-13735 Additional checks for X-Trans CFA pattern data ---- Patch for CVE-2017-13735. Note...

wsss.cusa.canon.com XSS vulnerability

Open Bug Bounty ID: OBB-482306 Description| Value ---|--- Affected Website:| wsss.cusa.canon.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

mycsa.csa.canon.com XSS vulnerability

Open Bug Bounty ID: OBB-440020 Description| Value ---|--- Affected Website:| mycsa.csa.canon.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

csa.canon.com XSS vulnerability

Open Bug Bounty ID: OBB-440017 Description| Value ---|--- Affected Website:| csa.canon.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

canon-bretagne.fr XSS vulnerability

Open Bug Bounty ID: OBB-382615 Description| Value ---|--- Affected Website:| canon-bretagne.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

canon.ca XSS vulnerability

Vulnerable URL: http://www.canon.ca/InetDD//downloadDisclaimer.htm?contrl=disclaimer=PS3161132=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 54804 VIP website status:| No Coordinated Disclosure Timeline:...

cla.canon.com XSS vulnerability

Vulnerable URL: http://www.cla.canon.com/cla/en/consumer/news?gotoPage=1===xss"=xss" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timelin...

Fedora 26 : LibRaw (2017-80c4677540)

Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data ---- LibRaw 0.18.3 Fix for CVE-2017-13735 Additional checks for X-Trans CFA pattern data ---- Patch for CVE-2017-13735. Note that Tenable Network Security...

DEBIAN-CVE-2017-14348

LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file...

CVE-2017-14348

LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file...

UBUNTU-CVE-2017-14348

LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file...

shop.usa.canon.com XSS vulnerability

Vulnerable URL: https://shop.usa.canon.com/shop/ProductListingView?searchType=1000==-1==SimpleSearch====%2Fwcsstore%2FCanonB2BStoreFrontAssetStore%2F==10051==18"'--!===565757=10051=false=ProductListingView615523307= Details: Description| Value ---|--- Patched:| Yes, at 29.09.2017 Latest check for...

Latest Book Inducted into Cybersecurity Canon

Thursday evening Mrs B and I were pleased to attend an awards seminar for the Cybersecurity Canon. This is a project sponsored by Palo Alto Networks and led by Rick Howard. The goal is "identify a list of must-read books for all cybersecurity practitioners." Rick reviewed my fourth book The...

eserv.canon-europe.com XSS vulnerability

Vulnerable URL: https://eserv.canon-europe.com/eservices.nsf/content.html?open=authentication=invalidcredentials" Details: Description| Value ---|--- Patched:| Yes, at 22.03.2017 Latest check for patch:| 22.03.2017 13:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

projectors.usa.canon.com XSS vulnerability

Vulnerable URL: http://projectors.usa.canon.com/search/Search.php Details: Description| Value ---|--- Patched:| Yes, at 22.06.2017 Latest check for patch:| 22.06.2017 22:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...