CVEvulnerability
CVE-2020-26508
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-11-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-522
Description
The WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve stored SMB credentials via the export feature, even though these are intentionally inaccessible in the UI.
Affected configurations
• canon oce colorwave 3500 firmware 5.1.1.0
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- https://www.syss.de/pentest-blog/ Third Party Advisory
- https://www.syss.de/pentest-blog/ Third Party Advisory