CVE-2025-3078 Details

A passback vulnerability has been identified in Canon's office multifunction printers, small office multifunction printers, laser beam printers, and production printers. This vulnerability could allow an attacker who gains administrative access to the device to retrieve sensitive authentication information, such as SMTP or LDAP credentials, from the printer's settings.

Users are advised to change default passwords, set up administrator and general user ID/passwords where applicable, and ensure physical security of the devices. Additionally, some models have received firmware updates to enhance security; users should consult the Canon security guide for their specific product to determine if an update is available.