This vulnerability (CWE-1188) arises from the EOS Network Setting Tool for Windows using an insecure default protocol for FTP connections in version 1.5.0 or earlier. The default use of a non-secure protocol may allow attackers to intercept or tamper with network communications. The CVSS 4.0 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, and high impact on confidentiality. No vendor advisory or patch information is currently available, and the affected versions are identified as 1.5.0 or earlier.

The use of a non-secure FTP protocol by default can lead to exposure of sensitive data transmitted over the network, potentially allowing attackers to intercept or manipulate the data. This compromises confidentiality but does not affect integrity or availability according to the CVSS vector. The vulnerability requires no privileges and no user interaction, increasing the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider manually configuring the tool to use secure protocols for FTP or avoid using the default FTP settings. Monitor Canon's advisories for updates.