PT-2004-3061 · Canon · Canon Imagerunner (Ir) 5000I+1

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2166

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Canon ImageRUNNER (iR) 5000i and C3200 digital printer (affected versions not specified)

Description The issue concerns the print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer. When IP address range filtering is not used, remote attackers can print arbitrary text without authentication by sending a text/plain email to TCP port 25.

Recommendations For the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, consider implementing IP address range filtering to restrict access to the print-from-email feature. As a temporary workaround, restrict access to TCP port 25 to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-2166

Affected Products

Canon Imagerunner (Ir) 5000I

Canon Imagerunner (Ir) C3200

References · 5

• http://securityfocus.com/archive/1/376242 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2166 · Security Note
• http://secunia.com/advisories/12659 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17512 · Note
• http://securityfocus.com/bid/11247 · Note