« Volver al listado

CVE-2006-4680

Estado: ModificadaMedia (4)—

The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Canon — Imagerunner 2620Canon — Imagerunner 5020Canon — Imagerunner 6870Canon — Imagerunner 8500Canon — Imagerunner 9070Canon — Imagerunner C3220Canon — Imagerunner C6800

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-4680",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-09-11T17:04:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/21788",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/1538",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/445302/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/445532/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/19865",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3501",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28795",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21788",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/1538",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/445302/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/445532/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/19865",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3501",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28795",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information."
    },
    {
      "lang": "es",
      "value": "El interfaz de usuario remoto de Canon imageRUNNER incluye nombres de usuario y contraseñas cuando se exportan una libreta de direcciones, lo que permite a un atacante dependiente del contexto obtener información sensible."
    }
  ],
  "lastModified": "2026-06-16T22:29:34.917",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_2620:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E4C7D11-EE90-4E10-9BBB-9CDC55467A2B"
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_5020:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E411CEEF-8615-47B3-AC1F-F907ECD8C725"
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_6870:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "86B994ED-E476-43EE-BD7D-FA3158AA66F8"
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_8500:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC5C108F-F89B-457D-9EDA-A5096AA01363"
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_9070:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C40ED96-C1D9-4C2F-B90A-BEF0B36BAF17"
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_c3220:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66DACE20-FDA4-4633-9755-95F72257F6CF"
            },
            {
              "criteria": "cpe:2.3:a:canon:imagerunner_c6800:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E1542430-BAEB-4A4E-B617-AFC303614E0C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}