CVE-2019-14339 - The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access

Back Back to CVE browser

MEDIUM

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access

Published Sep 5, 2019

5.5

MEDIUM

CVSS 3.0

EPSS 5.39%

Description

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://packetstormsecurity.com/files/154266/Canon-PRINT-2.5.5-URI-Injection.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://play.google.com/store/apps/details?id=jp.co.canon.bsd.ad.pixmaprint&hl=en_US
x_refsource_MISCProductThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/154266/Canon-PRINT-2.5.5-URI-Injection.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://play.google.com/store/apps/details?id=jp.co.canon.bsd.ad.pixmaprint&hl=en_US		x_refsource_MISCProductThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 5, 2019

Updated Aug 5, 2024

Reserved Jul 28, 2019

Link CVE-2019-14339

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-14339

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-14339