Serious security vulnerability discovered on some Canon printers

According to Tom's Hardware, all firmware versions of the affected printers up to version 3.07 are considered vulnerable. Printers including the Canon i-Sensys MF750 and LBP670 Color Laser series, as well as some models of the i-Sensys X series (X C1333i, C1333iF, X C1333P) are at risk.

i-Sensys MF750 is one of the printer models with serious security vulnerabilities that researchers recently discovered.

Seven security vulnerabilities have been discovered in the aforementioned Canon printers. In particular, some allow for arbitrary code execution remotely, device crash, and denial-of-service (DoS) attacks. Most of these vulnerabilities are described as “critical” by the CVSS standard (a common security vulnerability scoring system). They received a 9.8/10 severity rating.

Several security researchers and organizations participated in discovering these vulnerabilities on Canon printers, including Nguyen Quoc, Team Viettel , ANHTUD, Connor Ford, and other anonymous researchers.

Owners of affected printers are advised not to connect them to the internet until an update is installed that addresses the security issues. The Japanese manufacturer has already started releasing new firmware for the affected printers to address the vulnerability. For example, there are updates for device models such as the MF754Cdw and MF752Cdw. Users are advised to install the new firmware using the new installation software called Firmware Update Tool V03.09 from the company's website.

Source link: https://thanhnien.vn/phat-hien-lo-hong-bao-mat-nghiem-trong-tren-mot-so-may-in-canon-18524021315155475.htm