61
CVEs
24
Critical
18
High
0
KEV
26
PoC
42
Unpatched C/H
0.0%
Patch Rate
2.7%
Avg EPSS
Severity Breakdown
CRITICAL
24
HIGH
18
MEDIUM
18
LOW
1
Monthly CVE Trend
Affected Products (30)
Lbp237dw Firmware
10
Mf455dw Firmware
10
Mf1643if Ii Firmware
10
Lbp236dw Firmware
10
Lbp632cdw Firmware
10
Mf654cdw Firmware
10
Mf1238 Ii Firmware
10
Lbp633cdw Firmware
10
Mf453dw Firmware
10
Mf1643i Ii Firmware
10
Mf653cdw Firmware
10
Mf656cdw Firmware
10
Mf451dw Firmware
10
I Sensys Lbp633Cdw Firmware
10
Mf452dw Firmware
10
Lbp1238 Ii Firmware
10
Mf652cw Firmware
10
Mf644Cdw Firmware
9
I Sensys Mf643Cdw Firmware
9
Lbp621C Firmware
9
I Sensys X C1127I Firmware
9
I Sensys Lbp664Cx Firmware
9
Lbp122Dw Firmware
9
I Sensys Mf641Cw Firmware
9
Mf745Cdw Firmware
9
Maxify Gx3020 Firmware
9
Mf269Dw Ii Firmware
9
Mf641Cw Firmware
9
I Sensys Mf645Cx Firmware
9
Lbp1127C Firmware
9
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2013-4615 | The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service (device hang) via a crafted LAN_TXT24 parameter to. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 63.3%. | MEDIUM | 5.0 | 63.3% | 108 |
PoC
No patch
|
| CVE-2021-38085 | The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 1.0% | 74 |
PoC
No patch
|
| CVE-2018-11692 | An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 4.6% | 69 |
PoC
No patch
|
| CVE-2018-11711 | A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors involving /portal_top.html to get full access to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 5.3% | 69 |
PoC
No patch
|
| CVE-2018-12048 | A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 5.2% | 69 |
PoC
No patch
|
| CVE-2018-12049 | A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 5.2% | 69 |
PoC
No patch
|
| CVE-2019-5994 | Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 2.5% | 64 |
PoC
No patch
|
| CVE-2019-5998 | Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 2.6% | 64 |
PoC
No patch
|
| CVE-2019-5999 | Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 2.5% | 64 |
PoC
No patch
|
| CVE-2019-6000 | Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 2.4% | 64 |
PoC
No patch
|
| CVE-2020-10671 | The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 0.7% | 64 |
PoC
No patch
|
| CVE-2022-26111 | The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search (or editing an existing/predefined search) of the documents. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 4.1% | 64 |
PoC
No patch
|
| CVE-2020-10669 | The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the page /home.jsp. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.5 | 3.5% | 58 |
PoC
No patch
|
| CVE-2021-38154 | Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.5 | 4.0% | 58 |
PoC
No patch
|
| CVE-2021-43471 | In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.5 | 1.4% | 58 |
PoC
No patch
|