Security advisory for Canon digital cameras related to PTP (Picture Transfer Protocol)

Messages
680
Edit My Images
No
#1
Hi everyone

not sure if this has already been reported but it appears that anyone using PTP on Canon cameras may be open to cyber attack. Canon have issued lots of firmware updates for WiFi enabled cameras. please check here to read more about it and download yourselves a firmware update.



Update: 09/12/2019
Thank you very much for using Canon products.
An international team of security researchers has drawn our attention to a vulnerability related to communications via the Picture Transfer Protocol (PTP), which is used by Canon digital cameras, as well as a vulnerability related to firmware updates.
(CVE-ID:CVE-2019-5994, CVE-2019-5995, CVE-2019-5998, CVE-2019-5999, CVE-2019-6000, CVE-2019-6001)
Due to these vulnerabilities, the potential exists for third-party attack on the camera if the camera is connected to a PC or mobile device that has been hijacked through an unsecured network.
At this point, there have been no confirmed cases of these vulnerabilities being exploited to cause harm, but in order to ensure that our customers can use our products securely, we would like to inform you of the following workarounds for this issue.
  • Ensure the suitability of security-related settings of the devices connected to the camera, such as the PC, mobile device, and router being used.
  • Do not connect the camera to a PC or mobile device that is being used in an unsecure network, such as in a free Wi-Fi environment.
  • Do not connect the camera to a PC or mobile device that is potentially exposed to virus infections.
  • Disable the camera’s network functions when they are not being used.
  • Download the official firmware from Canon’s website when performing a camera firmware update
 
Last edited:
Messages
1,981
Name
Brian
Edit My Images
Yes
#3
This not only old news, it is unecessarily alarmist.
Although it can be demonstrated the camera can be vulnerable to attack, there have been no reported instances of this actually happening.
As a precaution Canon have released updated firmware for the vulnerable cameras.
 
OP
OP
T
Messages
680
Edit My Images
No
#4
This not only old news, it is unecessarily alarmist.
Although it can be demonstrated the camera can be vulnerable to attack, there have been no reported instances of this actually happening.
As a precaution Canon have released updated firmware for the vulnerable cameras.
the article I read was dated 12th September...hardly old news.
I don't think I presented the information in a dramatic or alarmist way....was just try to help people and raise awareness.
 
Top