CVE-2025-3078 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

A passback vulnerability which relates to production printers and office multifunction printers.

Reserved 2025-04-01 | Published 2025-05-19 | Updated 2025-05-20 | Assigner Canon

MEDIUM: 6.3CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

HIGH: 8.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Problem types

CWE-522: Insufficiently Protected Credentials

Product status

all version

affected

all version

affected

all version

affected

all version

affected

all version

affected

References

psirt.canon/advisory-information/cp2025-004/ vendor-advisory

canon.jp/support/support-info/250519vulnerability-response vendor-advisory

www.usa.canon.com/...e-multifunction-printers-laser-printers vendor-advisory

www.canon-europe.com/support/product-security vendor-advisory

psirt.canon/hardening/ mitigation

corporate.jp.canon/caution/160106 mitigation

cve.org (CVE-2025-3078)

nvd.nist.gov (CVE-2025-3078)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-3078

Support options

Helpdesk Chat, Email, Knowledgebase