CP2026-006 Multiple Vulnerabilities in Data Collection Agent

 

 

Multiple vulnerabilities have been identified in a component used by the Data Collection Agent*. If exploited, these vulnerabilities could potentially result in impacts such as denial of service (DoS) attacks or exposure of credentials used for proxy connections.

*This component is used only when [Monitoring Mode] is set to "CCA mode"; therefore, the Data Collection Agent is not affected by these vulnerabilities when [Monitoring Mode] is set to "Standard mode".

 

Data Collection Agent Versions 2.0.2 to 2.0.4 (inclusive)

(Only when [Monitoring Mode] is set to "CCA mode"）

 

An updated version of the Data Collection Agent (Version 2.0.5 or later) has been made available to address these vulnerabilities. Installation requires support from Service & Support personnel. Please contact your local Canon sales company for further information and guidance.

 

The following CVEs are addressed in this advisory:

CVE-2025-62168

CVE-2024-45802

CVE-2024-37894

CVE-2024-25617

CVE-2024-25111

CVE-2023-49286

CVE-2023-49285

CVE-2022-41317

CVE-2021-46784

CVE-2021-33620

CVE-2021-31808

CVE-2021-31807

CVE-2021-31806

CVE-2021-28662