CVE-2020-10671

The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections

published March 19, 2020

CVSS
—
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. This is a system-wide issue. An attacker could perform administrative actions by targeting a logged-in administrative user. NOTE: this is fixed in the latest version.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00703 · 52.7th percentile
Published
2020-03-19T18:11Z
EPSS history
Timeline
  • 19 MAR 18:11Z
    The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections
    cvelistv5