PT-2020-16429
CVE-2020-26508
·
تاريخ النشر
2020-11-16
·
تاريخ التحديث
2020-12-01
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Canon Oce ColorWave 3500 version 5.1.1.0
Description
The issue allows attackers to retrieve stored SMB credentials via the export feature in the WebTools component, even though these credentials are intentionally inaccessible in the UI.
Recommendations
For Canon Oce ColorWave 3500 version 5.1.1.0, consider restricting access to the export feature in the WebTools component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾