The Canon EOS Network Setting Tool versions 1.5.0 and earlier embed a hard‑coded cryptographic key directly inside the executable. Based on the description, it is inferred that an attacker who can obtain the binary can extract the key and use it to decrypt traffic, sign forged commands, or otherwise compromise connectivity, thereby threatening the confidentiality and integrity of configuration exchanges over the network.

Canon Inc.’s EOS Network Setting Tool for both Windows and macOS is affected when installed at version 1.5.0 or earlier; no further subversion details are provided.

The CVSS score of 6.9 signals moderate severity, while an EPSS of less than 1% suggests exploitation is unlikely to be widespread. The issue is not listed in the CISA KEV catalog. Based on the description, it is inferred that the likely attack path requires an adversary to obtain the tool binary or have local access; from there, the hard‑coded key can be extracted and employed for malicious actions. Without a publicly known exploit, the overall risk remains moderate but warrants proactive mitigation.