Browse CVEs

HIGH 8.8 CVE-2022-43608 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 printers.… Mf644cdw Firmware Mitigation only Fix from $1,9502023-03-29 CRITICAL 9.8 CVE-2022-24673 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentic… D1620 Firmware Mitigation only Fix from $2,3002023-03-28 HIGH 8.8 CVE-2022-24672 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers.… D1620 Firmware Mitigation only Fix from $1,9502023-03-28 HIGH 8.8 CVE-2022-24674 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers.… D1620 Firmware Mitigation only Fix from $1,9502023-03-28 HIGH 7.5 CVE-2021-43471 In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device af… Lbp223dw Firmware No fix yet Fix from $1,9502021-12-06 HIGH 7.5 CVE-2021-38154 Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP access, a… No fix yet Fix from $1,9502021-08-29 MEDIUM 6.1 CVE-2021-39368 Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter. Oce Print Exec Workgroup No fix yet Fix from $1,6002021-08-23 MEDIUM 5.3 CVE-2021-39367 Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection. Oce Print Exec Workgroup No fix yet Fix from $1,6002021-08-23 HIGH 7.5 CVE-2020-16849 An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, w… Mf237w Firmware Mitigation only Fix from $1,9502020-11-30 CRITICAL 9.8 CVE-2020-26508 The WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve stored SMB credentials via the export feature, even t… Oce Colorwave 3500 Firmware Mitigation only Fix from $2,3002020-11-16 HIGH 7.5 CVE-2020-10669 The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the page /home.jsp. An unauthent… Oce Colorwave 500 Firmware No fix yet Fix from $1,9502020-03-19 MEDIUM 5.5 CVE-2019-14339EPSS 5% The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capabi… Print No fix yet Fix from $1,6002019-09-05 MEDIUM 6.1 CVE-2018-12111 Cross-site scripting (XSS) vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTML via the… Efi Printme No fix yet Fix from $1,6002018-06-11 CRITICAL 9.8 CVE-2018-12048EPSS 5% A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi via vectors involving /portal… Lbp7110cw Firmware No fix yet Fix from $2,3002018-06-08 CRITICAL 9.8 CVE-2018-12049EPSS 5% A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors involving /por… Lbp6030w Firmware No fix yet Fix from $2,3002018-06-08 CRITICAL 9.8 CVE-2018-11711EPSS 5% A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors i… Mf210 Firmware No fix yet Fix from $2,3002018-06-04 CRITICAL 9.8 CVE-2018-11692 An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administrator Mode authentication for … Lbp3370 Firmware No fix yet Fix from $2,3002018-06-04 MEDIUM 6.8 CVE-2015-5631 Cross-site request forgery (CSRF) vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication … Pixma Mg7500 Series Inkjet Printer Mitigation only Fix from $1,6002015-09-11 HIGH 7.5 CVE-2013-4613 The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers … Mg3100 Printer Mitigation only Fix from $1,9502013-06-21 MEDIUM 5.0 CVE-2013-4615EPSS 16% The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service (device h… Mg3100 Printer Mitigation only Fix from $1,6002013-06-21 MEDIUM 6.4 CVE-2008-0303 The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent pr… I Sensys Mitigation only Fix from $1,6002008-02-29 HIGH 7.5 CVE-2004-2166 The print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, when not using IP address range filtering, allows remote … Imagerunner 5000i Mitigation only Fix from $1,9502004-12-31