CVE-2018-11711: canon mf210_firmware Improper Authentication
Vulnerability summary
CVE-2018-11711 is a high (CVSS 10.0) Improper Authentication vulnerability in canon mf210_firmware. EPSS estimates a 5.01% chance of exploitation in the next 30 days, higher than 92.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 04-06-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors involving /portal_top.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
5.01%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
-0.18 pp
From 5.20% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploitDB 44845
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Canon2 products
1 vendor · 2 products
References
2 links- www.exploit-db.com/exploits/44845/ExploitX Refsource EXPLOIT DBBroken LinkThird Party AdvisoryVDB Entry
- gist.github.com/huykha/9dbcd0e46058f1e18bab241d1b2754bdX Refsource MISCBroken LinkThird Party Advisory