Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2020-10669

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Canon Oce Colorwave 500是日本佳能（Canon）公司的一款打印机。 Canon Oce Colorwave 500 4.0.0.0版本中的Web应用程序的/home.jsp页面存在身份验证绕过漏洞。攻击者可利用该漏洞获取任意用户上传文档的备份文件。

AI Predicted 7.5 Difficulty: Easy EPSS 3.55% · P89

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-10669

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the page /home.jsp. An unauthenticated attacker able to connect to the device's web interface can get a copy of the documents uploaded by any users. NOTE: this is fixed in the latest version.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Canon Oce Colorwave 500 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Canon Oce Colorwave 500是日本佳能（Canon）公司的一款打印机。 Canon Oce Colorwave 500 4.0.0.0版本中的Web应用程序的/home.jsp页面存在身份验证绕过漏洞。攻击者可利用该漏洞获取任意用户上传文档的备份文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2020-10669

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-10669

请登录查看更多情报信息。

Exploits & Public PoCs for CVE-2020-10669 (1)

Mailing List Discussions for CVE-2020-10669 (1)

Other References for CVE-2020-10669 (1)

Same Patch Batch · n/a · 2020-03-19 · 60 CVEs total

CVE-2019-16065 NETSAS Enigma NMS SQL注入漏洞
CVE-2019-16072 NETSAS Enigma NMS 操作系统命令注入漏洞
CVE-2019-16068 NETSAS Enigma NMS 跨站请求伪造漏洞
CVE-2019-16529 MediaWiki CheckUser extension 安全漏洞
CVE-2019-16063 NETSAS Enigma NMS 安全漏洞
CVE-2019-16069 NETSAS Enigma NMS 跨站脚本漏洞
CVE-2019-20526 Ignite Realtime Openfire 跨站脚本漏洞
CVE-2019-16067 NETSAS Enigma NMS 安全漏洞
CVE-2019-20525 Ignite Realtime Openfire 跨站脚本漏洞
CVE-2019-16066 NETSAS Enigma NMS 代码问题漏洞
CVE-2019-16070 NETSAS Enigma NMS 跨站脚本漏洞
CVE-2019-16064 NETSAS Enigma NMS 路径遍历漏洞
CVE-2019-16062 NETSAS Enigma NMS 安全漏洞
CVE-2019-20521 ERPNext 跨站脚本漏洞
CVE-2019-20520 ERPNext 跨站脚本漏洞
CVE-2019-20519 ERPNext 跨站脚本漏洞
CVE-2019-20518 ERPNext 跨站脚本漏洞
CVE-2019-16061 NETSAS Enigma NMS 安全漏洞
CVE-2019-20517 ERPNext 跨站脚本漏洞
CVE-2019-20516 ERPNext 跨站脚本漏洞

Showing top 20 of 60 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2020-10669

No comments yet

Leave a comment