Vulnerability · Published May 19, 2025 · Assigned by Canon
CVE-2025-3079
High 8.7
In plain English
A high-severity security flaw in i-sensys Series from Canon Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 51% of all known vulnerabilities).
Severity (CVSS 3.1)8.7High
Exploit odds (30 days)0.7%top 48.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A passback vulnerability which relates to office/small office multifunction printers and laser printers.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Canon Inc. | imageRUNNER Series | all version |
| Canon Inc. | imageCLASS Series | all version |
| Canon Inc. | i-sensys Series | all version |
| Canon Inc. | Satera Series | all version |
Weakness: CWE-522 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
References
- https://psirt.canon/advisory-information/cp2025-004/ vendor-advisory
- https://canon.jp/support/support-info/250519vulnerability-response vendor-advisory
- https://www.usa.canon.com/about-us/to-our-customers/cp2025-004-vulnerability-mitigation-remediation-for-production-printers-office-small-office-multifunction-printers-laser-printers vendor-advisory
- https://www.canon-europe.com/support/product-security/ vendor-advisory
- https://psirt.canon/hardening/ mitigation
- https://corporate.jp.canon/caution/160106 mitigation