« Volver al listado

CVE-2025-3079

Estado: AplazadaMedia (6.3)—

A passback vulnerability which relates to office/small office multifunction printers and laser printers.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-3079",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-3079",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-20T14:05:40.849918Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.7,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.8,
        "exploitabilityScore": 2.3
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 6.3,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "HIGH",
          "subIntegrityImpact": "HIGH",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "HIGH",
          "vulnConfidentialityImpact": "NONE",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "affectedData": [
        {
          "vendor": "Canon Inc.",
          "product": "imageRUNNER Series",
          "versions": [
            {
              "status": "affected",
              "version": "all version"
            }
          ]
        },
        {
          "vendor": "Canon Inc.",
          "product": "imageCLASS Series",
          "versions": [
            {
              "status": "affected",
              "version": "all version"
            }
          ]
        },
        {
          "vendor": "Canon Inc.",
          "product": "i-sensys Series",
          "versions": [
            {
              "status": "affected",
              "version": "all version"
            }
          ]
        },
        {
          "vendor": "Canon Inc.",
          "product": "Satera Series",
          "versions": [
            {
              "status": "affected",
              "version": "all version"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-05-20T00:15:25.120",
  "references": [
    {
      "url": "https://canon.jp/support/support-info/250519vulnerability-response",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://corporate.jp.canon/caution/160106",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://psirt.canon/advisory-information/cp2025-004/",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://psirt.canon/hardening/",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://www.canon-europe.com/support/product-security/",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    },
    {
      "url": "https://www.usa.canon.com/about-us/to-our-customers/cp2025-004-vulnerability-mitigation-remediation-for-production-printers-office-small-office-multifunction-printers-laser-printers",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "description": [
        {
          "lang": "en",
          "value": "CWE-522"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A passback vulnerability which relates to office/small office multifunction printers and laser printers."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de retorno relacionada con impresoras multifunción de oficina/oficina pequeña y impresoras láser."
    }
  ],
  "lastModified": "2026-06-17T09:19:09.400",
  "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
}