The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadvertent proxy via a modified PORT command, aka FTP bounce.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagerunner_c6800 | Canon | * | * |
| Imagerunner | Canon | c6870i | c6870i |
| Imagerunner | Canon | 7095p | 7095p |
| Imagerunner | Canon | 7086 | 7086 |
| Imagerunner | Canon | 4570 | 4570 |
| Imagerunner | Canon | 5065n | 5065n |
| Imagerunner | Canon | c5185i | c5185i |
| Imagerunner | Canon | 5065 | 5065 |
| Imagerunner | Canon | c2380i | c2380i |
| Imagerunner_c3200 | Canon | * | * |
| Imagerunner | Canon | 2570ci | 2570ci |
| Imagerunner | Canon | 3530 | 3530 |
| Imagerunner | Canon | 6800c | 6800c |
| Imagerunner | Canon | c6880 | c6880 |
| Imagerunner | Canon | 3170c | 3170c |
| Imagerunner | Canon | c3380 | c3380 |
| Imagerunner | Canon | clc4040 | clc4040 |
| Imagerunner | Canon | clc5151 | clc5151 |
| Imagerunner | Canon | 8070 | 8070 |
| Imagerunner | Canon | 5075 | 5075 |
| Imagerunner | Canon | c6880i | c6880i |
| Imagerunner | Canon | 3170ci | 3170ci |
| Imagerunner_8500 | Canon | * | * |
| Imagerunner | Canon | 5055n | 5055n |
| Imagepress | Canon | c1 | c1 |
| Imagerunner | Canon | c4580i | c4580i |
| Imagerunner | Canon | 3045n | 3045n |
| Imagerunner | Canon | 5075n | 5075n |
| Imagerunner | Canon | c3380i | c3380i |
| Imagerunner | Canon | c5880i | c5880i |
| Imagerunner | Canon | 7095 | 7095 |
| Imagerunner | Canon | 3035 | 3035 |
| Imagerunner | Canon | c2880i | c2880i |
| I-sensys | Canon | lbp5360 | lbp5360 |
| Imagerunner | Canon | 7105 | 7105 |
| Imagerunner | Canon | c3220n | c3220n |
| Imagerunner | Canon | 2870 | 2870 |
| Imagerunner | Canon | 85plus | 85plus |
| Imagerunner_9070 | Canon | * | * |
| Imagerunner | Canon | 3180c | 3180c |
| Imagerunner_6870 | Canon | * | * |
| Imagerunner | Canon | 105plus | 105plus |
| Imagerunner | Canon | 2570c | 2570c |
| I-sensys | Canon | lbp3460 | lbp3460 |
| Imagerunner | Canon | c5870i | c5870i |
| Imagerunner | Canon | 6570 | 6570 |
| Imagerunner | Canon | 2270 | 2270 |
| Imagerunner | Canon | 3045 | 3045 |
| Imagerunner | Canon | c2620 | c2620 |
| Imagerunner | Canon | 5800cn | 5800cn |
| Imagerunner_5000i | Canon | * | * |
| Imagerunner | Canon | c2620n | c2620n |
| Imagerunner | Canon | c5870 | c5870 |
| Imagerunner | Canon | 3025n | 3025n |
| Imagerunner_5020 | Canon | * | * |
| Imagerunner | Canon | 5055 | 5055 |
| Imagerunner | Canon | 3180ci | 3180ci |
| Imagerunner | Canon | 3025 | 3025 |
| Imagerunner | Canon | 2230 | 2230 |
| Imagerunner | Canon | c5880 | c5880 |
| Imagerunner | Canon | 5800c | 5800c |
| Imagerunner | Canon | 5570 | 5570 |
| Imagerunner_2620 | Canon | * | * |
| Imagerunner_c3220 | Canon | * | * |
| Imagerunner | Canon | 6800cn | 6800cn |
| I-sensys | Canon | lbp3360 | lbp3360 |
| Imagerunner | Canon | 3570 | 3570 |
| Imagerunner | Canon | c2880 | c2880 |
| Imagerunner | Canon | c4080i | c4080i |
| Imagerunner | Canon | 3035n | 3035n |