6.9
CVSS 4.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, с администраторски права и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.
Засегнати продукти
- Canon Inc. imagePRESS Series: all version
- Canon Inc. imageFORCE Series: all version
- Canon Inc. imageRUNNER ADVANCE Series: all version
- Canon Inc. imageRUNNER Series: all version
- Canon Inc. Satera MF7525F: v15.00 or earlier
- Canon Inc. Satera MF7625F: v8.12 or earlier
- Canon Inc. Satera MF7725F: v16.04 or earlier
- Canon Inc. Satera MF842CDW: v16.04 or earlier
- Canon Inc. imageCLASS X C1538iF II: v16.04 or earlier
- Canon Inc. imageCLASS X MF1538C II: v16.04 or earlier
- Canon Inc. i-SENSYS C1533iF II: v16.04 or earlier
- Canon Inc. i-SENSYS X C1538 iF II: v16.04 or earlier
- Canon Inc. i-SENSYS MF842Cdw: v16.04 or earlier
- Canon Inc. MF842CDW: v16.04 or earlier
- Canon Inc. MF842CX: v16.04 or earlier
Вид слабост
История
- 23 април 2026 Публикувано
Други уязвимости в Canon Inc. imagePRESS Series
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-1789
- https://nvd.nist.gov/vuln/detail/CVE-2026-1789
- https://psirt.canon/advisory-information/cp2026-003/
- https://canon.jp/support/support-info/260423vulnerability-response
- https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers
- https://www.canon-europe.com/support/product-security/