VULNERABILITY INTELLIGENCE

CVE-2020-26508

CVSS score9.8 CRITICAL
EPSS probability1.14%
CISA KEVNot currently listed
Published2020-11-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve stored SMB credentials via the export feature, even though these are intentionally inaccessible in the UI.

Weakness classification

  • nvd@nist.gov: CWE-522

Primary references