MediumPublic exploit

Sensitive Information Disclosure in Canon PRINT for Android

IdentifiersCVE-2019-14339CWE-200

The Canon PRINT application for Android (jp.co.canon.bsd.ad.pixmaprint) version 2.5.5 exposes sensitive data via its ContentProvider component. The application does not properly restrict access to the canon.ij.printer.capability.data, allowing any application on the device to query and retrieve sensitive information such as factory administrator web interface passwords and WPA2-PSK keys.

For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

Start free trial

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

An attacker with a malicious application installed on the same Android device can access the exposed ContentProvider and extract sensitive information, including administrator passwords and Wi-Fi keys. This can lead to unauthorized access to the printer's web interface and compromise of the wireless network security.

Mitigation

If you can’t patch tonight, do this now.

Until an update is available, users should restrict installation of untrusted applications on their Android devices and consider removing the Canon PRINT application if not essential. Application sandboxing and monitoring for suspicious app behavior may also help mitigate risk.

Remediation

Patch, then assume compromise.

Update the Canon PRINT application to a version where the ContentProvider access is properly restricted, ensuring that only authorized components can access sensitive data. Canon should implement appropriate permission checks and data access controls.

PUBLIC EXPLOITS

Exploits

1 valid exploit after Mallory filtered fakes, detection scripts, and README-only repos (1 hidden).

VALID 1 / 2 TOTALView more in app

CVE-2019-14339MaturityPoCVerified exploit

This repository provides a proof-of-concept (POC) exploit for CVE-2019-14339, targeting the Canon PRINT 2.5.5 Android application. The vulnerability is an unprotected exported content provider ('IJPrinterCapabilityProvider') that allows unauthorized access to sensitive printer data, including factory passwords and WPA2-PSK keys. The repository contains: - An Android app (Java source in 'app/src/main/java/cannon/print/pwn/MainActivity.java') that, when run on a device with Canon PRINT installed, queries the vulnerable content provider and displays sensitive information. - A Python script ('poc-scripts/leak.py') that uses ADB to remotely query the same content provider and print extracted data to the console. - A Bash script ('poc-scripts/dos.sh') that triggers a denial-of-service condition in the Canon PRINT app by launching a specific activity via ADB. The exploit requires the target device to have the Canon PRINT 2.5.5 app installed and a supported Canon printer. The main attack vector is local (via a malicious app or ADB), and the key fingerprintable endpoint is the content provider URI 'content://canon.ij.printer.capability.data/'. The repository is structured as a typical Android project with supporting scripts for POC demonstration. The exploit is a POC and does not include weaponized or automated payload delivery.

0x48pirajDisclosed Jul 25, 2019javapythonlocal

EXPOSURE SURFACE

Affected products & vendors

Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.

VendorProductType

CanonPrintapplication

Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.

ACTIVITY FEED

Recent activity

No public activity tracked yet. Mallory keeps watching.

0 SOURCESView more in app

No public activity observed for this vulnerability.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.

Start free trial

Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity