Critical RCE Vulnerability Discovered in Canon’s GUARDIANWALL MailSuite A severe security flaw in Canon’s GUARDIANWALL MailSuite has been identified, exposing corporate email infrastructure to remote code execution (RCE) attacks. Tracked as JVN#35567473, the vulnerability stems from a stack-based buffer overflow in the `pop3wallpasswd` command, allowing threat actors to execute arbitrary code on affected systems. By sending a maliciously crafted request, attackers can overflow a memory buffer, corrupt adjacent memory, and gain unauthorized control over the web service. Successful exploitation could lead to data breaches, system manipulation, or full server compromise without requiring valid credentials. The flaw affects GUARDIANWALL MailSuite versions 1.4.00 through 2.4.26, while earlier versions (pre-1.4.00) and legacy editions (7.x and 8.x) remain unaffected. Canon has released an urgent security patch for impacted systems, with administrators advised to apply it immediately. For organizations unable to patch immediately, a temporary workaround involves disabling the MailSuite administration screen by stopping the `grdn-wgw-work` process on the WGW worker server. The service can be restored after patching. Security teams are urged to audit their deployments to assess exposure and prioritize remediation.

Canon, a well-known hardware provider, has recently launched a cybersecurity subscription service aimed at protecting its print devices. However, this launch coincides with the discovery of a critical vulnerability (CVE-2025-1268) in Canon's printer drivers, which could allow attackers to execute arbitrary code or disrupt printing operations. Additionally, there are reports of root-level access to Canon's internal firewall systems being sold on underground forums, raising concerns about potential network breaches. While Canon has issued advisories and urged users to update vulnerable drivers, the persistence of such flaws underscores the risks associated with poorly secured print infrastructure.

Canon Inc. experienced a critical vulnerability in printer drivers, CVE-2025-1268, allowing potential arbitrary code execution due to a buffer overflow. This flaw, discovered in the Generic Plus series of drivers, could disrupt print services and compromise system integrity. Though the likelihood of active exploitation is low and no incidents have been reported, Canon issued security updates for affected drivers. Canon urges users of office multifunction devices, small office printers, and production printers to update their drivers to prevent possible exploitation and maintain security.