CVE-2008-0303: Medium severity canon i-sensys vulnerability

Published Feb 29, 2008

Updated

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.

Affected Software

70 affected components

Canon I-sensys=lbp3360

Canon I-sensys=lbp3460

Canon I-sensys=lbp5360

Canon imagePRESS=c1

Canon imageRUNNER=85plus

Canon imageRUNNER=105plus

Canon imageRUNNER=2230

Canon imageRUNNER=2270

Canon imageRUNNER=2570c

Canon imageRUNNER=2570ci

Canon imageRUNNER=2870

Canon imageRUNNER=3025

Canon imageRUNNER=3025n

Canon imageRUNNER=3035

Canon imageRUNNER=3035n

Canon imageRUNNER=3045

Canon imageRUNNER=3045n

Canon imageRUNNER=3170c

Canon imageRUNNER=3170ci

Canon imageRUNNER=3180c

Canon imageRUNNER=3180ci

Canon imageRUNNER=3530

Canon imageRUNNER=3570

Canon imageRUNNER=4570

Canon imageRUNNER=5055

Canon imageRUNNER=5055n

Canon imageRUNNER=5065

Canon imageRUNNER=5065n

Canon imageRUNNER=5075

Canon imageRUNNER=5075n

Canon imageRUNNER=5570

Canon imageRUNNER=5800c

Canon imageRUNNER=5800cn

Canon imageRUNNER=6570

Canon imageRUNNER=6800c

Canon imageRUNNER=6800cn

Canon imageRUNNER=7086

Canon imageRUNNER=7095

Canon imageRUNNER=7095p

Canon imageRUNNER=7105

Canon imageRUNNER=8070

Canon imageRUNNER=c2380i

Canon imageRUNNER=c2620

Canon imageRUNNER=c2620n

Canon imageRUNNER=c2880

Canon imageRUNNER=c2880i

Canon imageRUNNER=c3220n

Canon imageRUNNER=c3380

Canon imageRUNNER=c3380i

Canon imageRUNNER=c4080i

Canon imageRUNNER=c4580i

Canon imageRUNNER=c5185i

Canon imageRUNNER=c5870

Canon imageRUNNER=c5870i

Canon imageRUNNER=c5880

Canon imageRUNNER=c5880i

Canon imageRUNNER=c6870i

Canon imageRUNNER=c6880

Canon imageRUNNER=c6880i

Canon imageRUNNER=clc4040

Canon imageRUNNER=clc5151

Canon Imagerunner 2620

Canon Imagerunner 5000i

Canon Imagerunner 5020

Canon Imagerunner 6870

Canon Imagerunner 8500

Canon Imagerunner 9070

Canon Imagerunner C3200

Canon Imagerunner C3220

Canon Imagerunner C6800

Event History

Feb 29, 2008

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0303?

CVE-2008-0303 is classified as a medium severity vulnerability due to the potential for unauthorized remote access.

How do I fix CVE-2008-0303?

To fix CVE-2008-0303, update the firmware of affected Canon printers to the latest version provided by Canon.

What systems are affected by CVE-2008-0303?

CVE-2008-0303 affects multiple models of Canon imageRUNNER and imagePRESS printers that have the FTP print feature enabled.

What type of attack does CVE-2008-0303 enable?

CVE-2008-0303 allows attackers to exploit the FTP print feature using a modified PORT command to perform FTP bounce attacks.

What can an attacker achieve with CVE-2008-0303?

An attacker can use CVE-2008-0303 to make the affected Canon printer act as an inadvertent proxy, potentially accessing internal network resources.