CVE-2021-38154: Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Ca...

Security readout for executives and security teams

Some Canon multifunction devices can be tricked into changing where they send e-mail output, such as fax-to-email content. If the vulnerable management mode is exposed over HTTP and lacks a PIN, an attacker could redirect sensitive documents to themselves. Exposure is limited to affected Canon devices with Catwalk Server enabled for HTTP access and no PIN required for General User Mode. The bundle names imageRUNNER ADVANCE iR-ADV C5250 as an example, but does not provide a complete affected model list. Treat this as a data leakage risk for office print and fax infrastructure. Prioritize internet-exposed or broadly reachable Canon devices, especially where fax or scan-to-email handles regulated, customer, legal, or financial information. Mitigation focus: Review Canon product advisories for model-specific remediation guidance.; Require a PIN for General User Mode where supported.; Disable Catwalk Server HTTP access if not operationally required..

Prepared

Jun 2, 2026, 18:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.