CVE-2019-6001

Name of the Vulnerable Software and Affected Versions Canon EOS series digital cameras versions 1.0.0 through 2.1.0 Canon EOS-1D X firmware version 2.1.0 and earlier Canon EOS-1D X MKII firmware version 1.1.6 and earlier Canon EOS-1D C firmware version 1.4.1 and earlier Canon EOS 5D MARK III firmware version 1.3.5 and earlier Canon EOS 5D MARK IV firmware version 1.2.0 and earlier Canon EOS 5DS firmware version 1.1.2 and earlier Canon EOS 5DS R firmware version 1.1.2 and earlier Canon EOS 6D firmware version 1.1.8 and earlier Canon EOS 6D MARK II firmware version 1.0.4 and earlier Canon EOS 7D MARK II firmware version 1.1.2 and earlier Canon EOS 70 D firmware version 1.1.2 and earlier Canon EOS 80 D firmware version 1.0.2 and earlier Canon EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier Canon EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and earlier Canon EOS KISS X9I / EOS D REBEL T7I / EOS 800D firmware version 1.0.1 and earlier Canon EOS KISS X7 / EOS D REBEL SL1 / EOS 100D firmware version 1.0.1 and earlier Canon EOS KISS X9 / EOS D REBEL SL2 / EOS 200D firmware version 1.0.1 and earlier Canon EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D firmware version 1.0.1 and earlier Canon EOS 8000D / EOS D REBEL T6S / EOS 760D firmware version 1.0.0 and earlier Canon EOS 9000D / EOS 77D firmware version 1.0.2 and earlier Canon EOS KISS X70 / EOS D REBEL T5 / EOS 1200D firmware version 1.0.2 and earlier Canon EOS D REBEL T5 RE / EOS 1200D MG / EOS HI firmware version 1.0.2 and earlier Canon EOS KISS X80 / EOS D REBEL T6 / EOS 1300D firmware version 1.1.0 and earlier Canon EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D firmware version 1.0.0 and earlier Canon EOS D REBEL T100 / EOS 3000D / EOS 4000D firmware version 1.0.0 and earlier Canon EOS R firmware version 1.3.0 and earlier Canon EOS RP firmware version 1.2.0 and earlier Canon EOS RP GOLD firmware version 1.2.0 and earlier Canon EOS M2 firmware version 1.0.3 and earlier Canon EOS M3 firmware version 1.2.0 and earlier Canon EOS M5 firmware version 1.0.1 and earlier Canon EOS M6 firmware version 1.0.1 and earlier Canon EOS M6(China) firmware version 5.0.0 and earlier Canon EOS M10 firmware version 1.1.0 and earlier Canon EOS M100 firmware version 1.0.0 and earlier Canon EOS KISS M / EOS M50 firmware version 1.0.2 and earlier Canon PowerShot SX740 HS firmware version 1.0.1 and earlier Canon PowerShot SX70 HS firmware version 1.1.0 and earlier Canon PowerShot G5Xmark II firmware version 1.0.1 and earlier

Description A buffer overflow in the PTP (Picture Transfer Protocol) of Canon EOS series digital cameras and PowerShot cameras allows an attacker on the same network segment to trigger the affected product being unresponsive or to execute arbitrary code on the affected product via the setadapterbatteryreport command.

Recommendations For each of the affected firmware versions, update to a version later than the one specified to resolve the issue. As a temporary workaround, consider disabling the PTP protocol until a patch is available. Restrict access to the network segment where the affected cameras are located to minimize the risk of exploitation.