CVE-2019-14339

Published: Sep 5, 2019Modified: Jun 17, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key.

Affected (1)

Products: Canon: Print

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Canon Print	Version 2.5.5

References (4)

http://packetstormsecurity.com/files/154266/Canon-PRINT-2.5.5-URI-Injection.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://play.google.com/store/apps/details?id=jp.co.canon.bsd.ad.pixmaprint&hl=en_US

Source: cve@mitre.org

ProductThird Party Advisory

http://packetstormsecurity.com/files/154266/Canon-PRINT-2.5.5-URI-Injection.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://play.google.com/store/apps/details?id=jp.co.canon.bsd.ad.pixmaprint&hl=en_US

Source: af854a3a-2127-422b-91ae-364da2661108

ProductThird Party Advisory

Timeline

No history available yet.