nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-38154 CVE-2021-38154
HIGHNuclei
canon - Incorrect Permission Assignment for Critical Resource
Record summary
CVE-2021-38154 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.
Description
Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For example, an incoming FAX may be sent through e-mail to the attacker. This occurs when a PIN is not required for General User Mode, as exploited in the wild in August 2021.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Aug 29, 2021 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Available material
- Nuclei templates
- 1
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
-canon | VulnCheck | Version data not supplied | |
Nuclei templates
1ProjectDiscoveryHIGHCanon Devices - Authentication Bypass in Catwalk ServerCVSS 7.5
Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For example, an incoming FAX may be sent through e-mail to the attacker. This occurs when a PIN is not required for General User Mode, as exploited in the wild in August 2021.
Impact
Unauthenticated attackers can modify email settings and redirect FAX and scan data to attacker-controlled email addresses when PIN protection is disabled, potentially intercepting sensitive business communications.
Remediation
Configure a PIN for General User Mode or apply Canon firmware updates that address this vulnerability.
WeaknessesCWE-732
Authorsdaffainfo
Template tagscvecve2021canonauth-bypassvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:h:canon:-:*:*:*:*:*:*:*:*
Shodan: title:"imageRUNNER"
https://protocolpolice.nl/CVE-2021-38154_Protocol_Police_Catwalk_Alert https://www.usa.canon.com/internet/portal/us/home/support/product-advisories https://nvd.nist.gov/vuln/detail/CVE-2021-38154
Source: ProjectDiscovery
References
3protocolpolice.nl
https://protocolpolice.nl/CVE-2021-38154_Protocol_Police_Catwalk_Alert usa.canon.com
https://www.usa.canon.com/internet/portal/us/home/support/product-advisories