Description
IRISPowerscan contain an insecure default
configuration where the built-in installation account is assigned elevated
privileges with a predictable password, which could allow an unauthenticated
attacker to gain unauthorised access to privileged application functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| I.R.I.S | IRISPowerscan | ≤ 12.3 | — |
References
- https://www.canon-europe.com/psirt/advisory-information vendor-advisory mitigation patch