« Volver al listado

CVE-2025-3078

Estado: AplazadaMedia (6.3)—

A passback vulnerability which relates to production printers and office multifunction printers.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-3078",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-3078",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-20T14:07:22.735172Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.7,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.8,
        "exploitabilityScore": 2.3
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 6.3,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "HIGH",
          "subIntegrityImpact": "HIGH",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "HIGH",
          "vulnConfidentialityImpact": "NONE",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "affectedData": [
        {
          "vendor": "Canon Inc.",
          "product": "imageRUNNER ADVANCE Series",
          "versions": [
            {
              "status": "affected",
              "version": "all version"
            }
          ]
        },
        {
          "vendor": "Canon Inc.",
          "product": "imageRUNNER Series",
          "versions": [
            {
              "status": "affected",
              "version": "all version"
            }
          ]
        },
        {
          "vendor": "Canon Inc.",
          "product": "imagePRESS V Series",
          "versions": [
            {
              "status": "affected",
              "version": "all version"
            }
          ]
        },
        {
          "vendor": "Canon Inc.",
          "product": "imagePRESS Series",
          "versions": [
            {
              "status": "affected",
              "version": "all version"
            }
          ]
        },
        {
          "vendor": "Canon Inc.",
          "product": "imageCLASS Series",
          "versions": [
            {
              "status": "affected",
              "version": "all version"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-05-20T00:15:24.520",
  "references": [
    {
      "url": "https://canon.jp/support/support-info/250519vulnerability-response",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://corporate.jp.canon/caution/160106",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://psirt.canon/advisory-information/cp2025-004/",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://psirt.canon/hardening/",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://www.canon-europe.com/support/product-security",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://www.usa.canon.com/about-us/to-our-customers/cp2025-004-vulnerability-mitigation-remediation-for-production-printers-office-small-office-multifunction-printers-laser-printers",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "description": [
        {
          "lang": "en",
          "value": "CWE-522"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A passback vulnerability which relates to production printers and office multifunction printers."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de devolución relacionada con impresoras de producción e impresoras multifunción de oficina."
    }
  ],
  "lastModified": "2026-06-17T09:19:09.287",
  "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
}