Canon LBP6650 / LBP3370 / LBP3460 / LBP7750C - Authenticaton Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Incorrect Access Control in Canon LBP6650, LBP3370, LBP3460, LBP7750C Exploit Author: Huy Kha Vendor Homepage: http://global.canon.com Software Link: Website Severity: High Version: LBP6650, LBP3370, LBP3460, LBP7750C Teste...

CVE-2018-11692

CVE-2018-11692 affects Canon LBP6650, LBP3370, LBP3460, and LBP7750C printers. A remote attacker can bypass Administrator Mode authentication for /tlogin.cgi by exploiting vectors involving frame.cgi?page=DevStatus, enabling unauthorized admin access. Public material (Exploit-DB, 0day, OpenVAS) c...

CVE-2018-11692: Improper Authentication

An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administrator Mode authentication for /tlogin.cgi via vectors involving frame.cgi?page=DevStatus. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the...

PT-2018-1375 · Canon · Canon Lbp3370 +3

Name of the Vulnerable Software and Affected Versions: Canon LBP6650 versions Canon LBP3370 versions Canon LBP3460 versions Canon LBP7750C versions Description: The issue is related to a weakness in the authentication procedure of Canon printer software when using standard device settings. It...