Description
A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecting certain production printers and office/small office multifunction printers.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Canon Inc. imagePRESS Series
all versionaffected
Canon Inc. imageFORCE Series
all versionaffected
Canon Inc. imageRUNNER ADVANCE Series
all versionaffected
Canon Inc. imageRUNNER Series
all versionaffected
Canon Inc. Satera MF7525F
v15.00 or earlieraffected
Canon Inc. Satera MF7625F
v8.12 or earlieraffected
Canon Inc. Satera MF7725F
v16.04 or earlieraffected
Canon Inc. Satera MF842CDW
v16.04 or earlieraffected
Canon Inc. imageCLASS X C1538iF II
v16.04 or earlieraffected
Canon Inc. imageCLASS X MF1538C II
v16.04 or earlieraffected
Canon Inc. i-SENSYS C1533iF II
v16.04 or earlieraffected
Canon Inc. i-SENSYS X C1538 iF II
v16.04 or earlieraffected
Canon Inc. i-SENSYS MF842Cdw
v16.04 or earlieraffected
Canon Inc. MF842CDW
v16.04 or earlieraffected
Canon Inc. MF842CX
v16.04 or earlieraffected
References
- https://psirt.canon/advisory-information/cp2026-003/ ↗
- https://canon.jp/support/support-info/260423vulnerability-response ↗
- https://www.usa.canon.com/about-us/to-our-customers/cpa2026-003-vulnerability-mitigation-remediation-for-production-printers-and-office-multifunction-printers ↗
- https://www.canon-europe.com/support/product-security/ ↗