CVE-2021-38154
Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.00%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For example, an incoming FAX may be sent through e-mail to the attacker. This occurs when a PIN is not required for General User Mode, as exploited in the wild in August 2021.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 4.00% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-732
- Affected
- canon/-
- Source
- cve@mitre.org
References
- https://protocolpolice.nl/CVE-2021-38154_Protocol_Police_Catwalk_AlertExploit, Third Party Advisory
- https://www.usa.canon.com/internet/portal/us/home/support/product-advisoriesProduct
- https://protocolpolice.nl/CVE-2021-38154_Protocol_Police_Catwalk_AlertExploit, Third Party Advisory
- https://www.usa.canon.com/internet/portal/us/home/support/product-advisoriesProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.