PT-2019-17925 · Canon · Eos R+37

Published 2019-08-06 · Updated 2020-08-24 · CVE-2019-5995

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions EOS series digital cameras versions 2.1.0 and earlier EOS-1D X MKII firmware version 1.1.6 and earlier EOS-1D C firmware version 1.4.1 and earlier EOS 5D MARK III firmware version 1.3.5 and earlier EOS 5D MARK IV firmware version 1.2.0 and earlier EOS 5DS firmware version 1.1.2 and earlier EOS 5DS R firmware version 1.1.2 and earlier EOS 6D firmware version 1.1.8 and earlier EOS 6D MARK II firmware version 1.0.4 and earlier EOS 7D MARK II firmware version 1.1.2 and earlier EOS 70 D firmware version 1.1.2 and earlier EOS 80 D firmware version 1.0.2 and earlier EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and earlier EOS KISS X9I / EOS D REBEL T7I / EOS 800D firmware version 1.0.1 and earlier EOS KISS X7 / EOS D REBEL SL1 / EOS 100D firmware version 1.0.1 and earlier EOS KISS X9 / EOS D REBEL SL2 / EOS 200D firmware version 1.0.1 and earlier EOS KISS X10 / EOS D REBEL SL3 / EOS 200D / EOS 250D firmware version 1.0.1 and earlier EOS 8000D / EOS D REBEL T6S / EOS 760D firmware version 1.0.0 and earlier EOS 9000D / EOS 77D firmware version 1.0.2 and earlier EOS KISS X70 / EOS D REBEL T5 / EOS 1200D firmware version 1.0.2 and earlier EOS D REBEL T5 RE / EOS 1200D MG / EOS HI firmware version 1.0.2 and earlier EOS KISS X80 / EOS D REBEL T6 / EOS 1300D firmware version 1.1.0 and earlier EOS KISS X90 / EOS D REBEL T7 / EOS 1500D / EOS 2000D firmware version 1.0.0 and earlier EOS D REBEL T100 / EOS 3000D / EOS 4000D firmware version 1.0.0 and earlier EOS R firmware version 1.3.0 and earlier EOS RP firmware version 1.2.0 and earlier EOS RP GOLD firmware version 1.2.0 and earlier EOS M2 firmware version 1.0.3 and earlier EOS M3 firmware version 1.2.0 and earlier EOS M5 firmware version 1.0.1 and earlier EOS M6 firmware version 1.0.1 and earlier EOS M6(China) firmware version 5.0.0 and earlier EOS M10 firmware version 1.1.0 and earlier EOS M100 firmware version 1.0.0 and earlier EOS KISS M / EOS M50 firmware version 1.0.2 and earlier PowerShot SX740 HS firmware version 1.0.1 and earlier PowerShot SX70 HS firmware version 1.1.0 and earlier PowerShot G5Xmark II firmware version 1.0.1 and earlier

Description A missing authorization issue exists in the specified EOS series digital cameras and PowerShot models, allowing for a specially crafted firmware update or unofficial firmware update to be applied without the user's consent via an unspecified vector.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2019-5995

Affected Products

Eos 100D

Eos 1200D

Eos 1300D

Eos 1500D

Eos 2000D

Eos 200D

Eos 250D

Eos 3000D

Eos 4000D

Eos 5D Mark Iii

Eos 5D Mark Iv

Eos 5Ds

Eos 6D

Eos 6D Mark Ii

Eos 700D

Eos 70D

Eos 750D

Eos 760D

Eos 77D

Eos 7D Mark Ii

Eos 800D

Eos 80D

Eos M10

Eos M100

Eos M2

Eos M3

Eos M5

Eos M50

Eos M6

Eos R

Eos Rp

Eos Rp Gold

Eos Series

Eos-1D C

Eos-1D X Mkii

Powershot G5Xmark Ii

Powershot Sx70 Hs

Powershot Sx740 Hs

References · 7

• 🔥 https://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera · Exploit
• https://cweb.canon.jp/e-support/products/eos-d/190806dilc-firm.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5995 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5995 · Vendor Advisory
• https://usa.canon.com/internet/portal/us/home/support/product-advisories/detail/the-vulnerability-in-canon-digital-cameras · Vendor Advisory
• https://canon-europe.com/support/product-security · Vendor Advisory
• http://jvn.jp/en/vu/JVNVU97511331/index.html · Note