The Canon EOS Network Setting Tool for Windows and macOS performs SSH connections to manage camera devices. The tool does not properly validate the SSH host key presented by the device, meaning that an attacker who can intercept or modify the SSH traffic could present a forged key and convince the tool to trust it. This flaw allows a man-in-the-middle attacker to potentially read, modify, or inject commands into the management session, which could compromise the confidentiality and integrity of the device configuration. The weakness is a classic certificate validation error (CWE‑295).

Any installation of Canon EOS Network Setting Tool version 1.5.0 or earlier on Windows or macOS is affected. The file is deployed by Canon Inc., and the vulnerability applies to all devices managed by this tool using its default SSH implementation.

The vulnerability carries a CVSS score of 7.1, indicating a high severity. The EPSS score is under 1 %, suggesting that exploitation is unlikely but not impossible. The flaw is not listed in the CISA KEV catalog. Attacks would require the attacker to have network access to the target device or be able to position themselves between the tool and the device; once positioned, the attacker could replace the host key and establish an unauthorized session. The risk is mitigated only by preventing the tool from accepting an unvalidated key.