Canon LBP6650/LBP3370/LBP3460/LBP7750C - Authenticaton Bypass(CVE-2018-11692)

Description : An issue was discovered on Canon LBP6650, LBP3370, LBP3460, LBP7750C printers. It is possible for a remote unauthenticated attacker to bypass the Administrator Mode authentication without a password at any URL of the device that requires authentication. PoC : Start searching for Can...

CVE-2018-11692

An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administrator Mode authentication for /tlogin.cgi via vectors involving frame.cgi?page=DevStatus. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the...

CVE-2018-11692

CVE-2018-11692 affects Canon LBP6650, LBP3370, LBP3460, and LBP7750C printers. A remote attacker can bypass Administrator Mode authentication for /tlogin.cgi by exploiting vectors involving frame.cgi?page=DevStatus, enabling unauthorized admin access. Public material (Exploit-DB, 0day, OpenVAS) c...