This vulnerability involves the EOS Network Setting Tool for Windows by Canon Inc., versions 1.5.0 and earlier, which initializes its FTP configuration using a non-secure protocol by default. This insecure default setting could expose data transmitted via FTP to interception or unauthorized access. The CVSS 4.0 vector indicates the vulnerability is remotely exploitable without privileges or user interaction and results in a high confidentiality impact. No official patch or remediation guidance has been provided by the vendor at this time.

The use of a non-secure FTP protocol by default can lead to interception of sensitive data during network transmission, compromising confidentiality. Since no privileges or user interaction are required for exploitation, attackers on the network could potentially capture or manipulate data sent via FTP. There is no indication of impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should manually configure the EOS Network Setting Tool to use secure protocols instead of the default non-secure FTP. Avoid transmitting sensitive data over the default FTP configuration and consider network-level protections such as VPNs or secure tunnels.