CVE-2008-0303: Canon I-Sensys

Medium severity, CVSS 6.4. EPSS: 2.1% chance of exploitation in the next 30 days.

The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.

Affected products

• Canon I-Sensys: version lbp3360 only; version lbp3460 only; version lbp5360 only
• Canon Imagepress: version c1 only
• Canon Imagerunner: version 85plus only; version 105plus only; version 2230 only; version 2270 only; version 2570c only; version 2570ci only; …
• Canon Imagerunner 2620: any version
• Canon Imagerunner 5000i: any version
• Canon Imagerunner 5020: any version
• Canon Imagerunner 6870: any version
• Canon Imagerunner 8500: any version
• Canon Imagerunner 9070: any version
• Canon Imagerunner c3200: any version
• Canon Imagerunner c3220: any version
• Canon Imagerunner c6800: any version

Published 2008-02-29. Last modified 2026-06-16.