Information Disclosure Vulnerability in Canon IJ Network Tool
CVE-2023-1763

6.5MEDIUM

Key Information:

Vendor
Canon Inc.
Status
Canon Ij Nw Tool
Vendor
CVE Published:
17 May 2023

Summary

The Canon IJ Network Tool prior to version 4.7.5 on macOS and version 4.7.3 on earlier OS X versions contains a vulnerability that enables attackers to acquire sensitive information about the Wi-Fi connection setup of the printer. This could potentially expose network configurations and credentials, posing a risk to network integrity and user privacy. Users are advised to update their software to mitigate this risk.

Affected Version(s)

Canon IJ NW Tool Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8)

References

https://psirt.canon/advisory-information/cp2023-002/
https://psirt.canon/hardening/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.