CVE-2020-26508

Name of the Vulnerable Software and Affected Versions Canon Oce ColorWave 3500 version 5.1.1.0

Description The issue allows attackers to retrieve stored SMB credentials via the export feature in the WebTools component, even though these credentials are intentionally inaccessible in the UI.

Recommendations For Canon Oce ColorWave 3500 version 5.1.1.0, consider restricting access to the export feature in the WebTools component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.