Canon Imagerunner 8500 vulnerabilities

2 CVEs affecting Canon Imagerunner 8500, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-0303, published 2008-02-29.

More from Canon.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-0303, published 2008-02-29. Medium severity, CVSS 6.4. EPSS: 2.1% chance of exploitation in the next 30 days. The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.
• CVE-2006-4680, published 2006-09-11. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information.