PT-2020-16429 · Canon · Canon Oce Colorwave 3500

Published 2020-11-16 · Updated 2020-12-01 · CVE-2020-26508

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Canon Oce ColorWave 3500 version 5.1.1.0

Description The issue allows attackers to retrieve stored SMB credentials via the export feature in the WebTools component, even though these credentials are intentionally inaccessible in the UI.

Recommendations For Canon Oce ColorWave 3500 version 5.1.1.0, consider restricting access to the export feature in the WebTools component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-26508

Affected Products

Canon Oce Colorwave 3500

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-26508 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26508 · Vendor Advisory
• https://syss.de/pentest-blog · Note
• https://t.me/cibsecurity/16398 · Telegram Post