CVE-2021-43471

In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a denial of service vulnerability.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

1.44% chance of exploitation in the next 30 days, 71th percentile

Published

2021-12-06

Updated

2024-08-04

Proof-of-concept exploits (1)

• cxaqhq/CVE-2021-434710★ · 2021-12-06

References

• CVE Record
• NVD entry

Related

• CVE-2022-2666
• CVE-2022-29383
• CVE-2021-43469
• CVE-2021-43481
• CVE-2021-43463
• CVE-2021-43483