CVE-2025-3079 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

A passback vulnerability which relates to office/small office multifunction printers and laser printers.

Reserved 2025-04-01 | Published 2025-05-19 | Updated 2025-05-20 | Assigner Canon

MEDIUM: 6.3CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

HIGH: 8.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Problem types

CWE-522: Insufficiently Protected Credentials

Product status

all version

affected

all version

affected

all version

affected

all version

affected

Credits

This issue was discovered by Vladislav Volozhenko. finder

References

psirt.canon/advisory-information/cp2025-004/ vendor-advisory

canon.jp/support/support-info/250519vulnerability-response vendor-advisory

www.usa.canon.com/...e-multifunction-printers-laser-printers vendor-advisory

www.canon-europe.com/support/product-security/ vendor-advisory

psirt.canon/hardening/ mitigation

corporate.jp.canon/caution/160106 mitigation

cve.org (CVE-2025-3079)

nvd.nist.gov (CVE-2025-3079)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-3079

Support options

Helpdesk Chat, Email, Knowledgebase