Canon Critical Alert: 7 New Flaws Expose Printers to Remote Hackers

Canon has issued a security advisory for its imageCLASS, i-SENSYS and Satera printer lines warning of seven critical vulnerabilities that could allow remote attackers to take complete control of devices. All flaws carry a near-maximum CVSS score of 9.8 and affect models sold across the US, Europe, and Japan, with CVEs including 2025-14231 through 2025-14237.

The vulnerabilities require no authentication to exploit, meaning an unauthenticated remote attacker could trigger a buffer overflow or invalid free, potentially leading to arbitrary code execution or a DoS attack if a printer is exposed to the Internet. The advisory notes the flaws affect devices running firmware v06.02 and earlier, with affected series varying by region such as US, Europe and Japan.

Canon recommends installing the latest firmware and, meanwhile, advocates physical isolation by using a private IP address and a firewall or segregated network to restrict access.