CVE-2025-3078
6.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
Summary
A passback vulnerability which relates to production printers and office multifunction printers.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Canon Inc. | imageRUNNER ADVANCE Series | all version | affected |
| Canon Inc. | imageRUNNER Series | all version | affected |
| Canon Inc. | imagePRESS V Series | all version | affected |
| Canon Inc. | imagePRESS Series | all version | affected |
| Canon Inc. | imageCLASS Series | all version | affected |
Weaknesses
- CWE-522: CWE-522: Insufficiently Protected Credentials
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
- https://psirt.canon/advisory-information/cp2025-004/
- https://canon.jp/support/support-info/250519vulnerability-response
- https://www.usa.canon.com/about-us/to-our-customers/cp2025-004-vulnerability-mitigation-remediation-for-production-printers-office-small-office-multifunction-printers-laser-printers
- https://www.canon-europe.com/support/product-security
- https://psirt.canon/hardening/
- https://corporate.jp.canon/caution/160106
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.