Improper SSH Host Key Validation in Canon EOS Network Setting Tool

Executive Summary

CVE-2026-9258 is a vulnerability in Canon's EOS Network Setting Tool, specifically versions 1.5.0 and earlier. The issue involves improper validation of SSH host keys, which are used to establish secure connections. This flaw could allow an attacker to obtain authentication credentials used in FTP, FTPS, and SFTP communication test functions.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability affects the EOS Network Setting Tool version 1.5.0 or earlier, included in EOS Utility versions 3.12.0 to 3.20.20 on Windows and macOS. Detection involves identifying if these vulnerable versions are present on your system.

To detect the presence of the vulnerable software, you can check the installed version of EOS Utility or EOS Network Setting Tool on your system.

• On Windows, use PowerShell to check installed programs: Get-ItemProperty 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*' | Where-Object { $_.DisplayName -like '*EOS Utility*' } | Select-Object DisplayName, DisplayVersion
• On macOS, check the version of EOS Utility by running: /Applications/EOS\ Utility.app/Contents/Info.plist and inspecting the CFBundleShortVersionString key or use: mdls -name kMDItemVersion /Applications/EOS\ Utility.app

Network detection of exploitation attempts is not detailed in the provided information, and no specific commands for network scanning or detection of the vulnerability are given.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to steal authentication credentials for FTP, FTPS, and SFTP communications. This could lead to unauthorized access to sensitive data or systems that rely on these credentials for secure file transfers.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate the vulnerability CVE-2026-9258, users should update the EOS Utility software to the latest version.

• Update EOS Utility to version 3.20.21 or later.
• Ensure that the EOS Network Setting Tool version is later than 1.5.0, as versions 1.5.0 and earlier are vulnerable.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability in the EOS Network Setting Tool could allow an attacker to obtain authentication credentials used in FTP, FTPS, and SFTP communication test functions. Exposure of such credentials may lead to unauthorized access to sensitive data, which could impact compliance with data protection regulations such as GDPR and HIPAA that require safeguarding authentication information and preventing unauthorized data access.

Therefore, failure to address this vulnerability by not updating to the latest software version may result in non-compliance with these standards due to potential data breaches or unauthorized access.

Useful 0 Not Useful 0