CVE-2018-12048 describes a critical authentication bypass vulnerability affecting the Canon LBP7110Cw printer's web interface. An unauthenticated remote attacker can gain full administrative access to the device by bypassing the Management Mode PIN via specific web interface paths. This vulnerability carries a CVSS score of 9.8 (Critical), indicating a high-impact attack that requires no user interaction or prior authentication. Successful exploitation allows for complete compromise of the device's confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV list), no public exploit code (Metasploit, Nuclei, ExploitDB), and no media coverage, the vulnerability has garnered significant community discussion, suggesting awareness among security researchers. The vendor noted that the issue arises when default settings are not secured according to documentation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:canon:lbp7110cw_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.