CVE-2018-11711: Critical severity canon mf210 firmware vulnerability
DISPUTED A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors involving /portaltop.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-11711.
What is the severity rating of CVE-2018-11711?
CVE-2018-11711 has a severity rating of 9.8 (critical).
Which Canon devices are affected by CVE-2018-11711?
The Canon MF210 and MF220 devices are affected by CVE-2018-11711.
How can a remote attacker exploit CVE-2018-11711?
A remote attacker can exploit CVE-2018-11711 by bypassing the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors involving /portal_top.html to gain full access to the device.
Are there any known exploits for CVE-2018-11711?
Yes, there are known exploits available for CVE-2018-11711. Example exploits can be found at the following references: [GitHub Gist](https://gist.github.com/huykha/9dbcd0e46058f1e18bab241d1b2754bd) and [Exploit Database](https://www.exploit-db.com/exploits/44845/).