The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the page /home.jsp. An unauthenticated attacker able to connect to the devices web interface can get a copy of the documents uploaded by any users. NOTE: this is fixed in the latest version.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Oce_colorwave_500_firmware | Canon | 4.0.0.0 (including) | 4.0.0.0 (including) |