Description
IRISPowerscan insufficiently restrict the use of
untrusted scripts. An authenticated user with access to script functionality
can import or modify scripts that are executed by the application, potentially
resulting in arbitrary code execution in the security context of the Windows
user running IRISPowerscan.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| I.R.I.S | IRISPowerscan | ≤ 12.3 | — |
References
- https://www.canon-europe.com/psirt/advisory-information vendor-advisory mitigation patch