CVE-2004-2166: The print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, when not using...

Security readout for executives and security teams

This issue affects the email-to-print feature on Canon ImageRUNNER iR 5000i and C3200 printers. If IP address range filtering is not used, an unauthenticated remote sender can cause the printer to print arbitrary plain text. The documented impact is unauthorized printing and resource consumption, not data theft or device takeover. Exposure is most likely on legacy Canon ImageRUNNER iR 5000i or C3200 devices with email printing enabled, TCP 25 reachable, and no IP address range filtering. Internet exposure would raise urgency, but the sources do not confirm prevalence. Treat this as a targeted hygiene issue for legacy printer fleets. It is unlikely to be board-level unless exposed externally or causing operational disruption, but it should be closed because the abuse requires no authentication. Mitigation focus: Enable IP address range filtering for print-from-email.; Restrict TCP port 25 access to trusted mail sources only.; Disable email printing where it is not operationally required..

Prepared

Jun 29, 2026, 19:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.