|Thank you for using Canon products.
An international team of security researchers has drawn our attention to a vulnerability related to communications via the Picture Transfer Protocol (PTP), which is used by Canon digital cameras, as well as a vulnerability related to firmware updates.
(CVE-ID:CVE-2019-5994, CVE-2019-5995, CVE-2019-5998, CVE-2019-5999, CVE-2019-6000, CVE-2019-6001）
Due to these vulnerabilities, the potential exists for third-party attack on the camera, if the camera is connected to a PC or mobile device that has been hijacked through an unsecured network.
At this point, there have been no confirmed cases of these vulnerabilities being exploited to cause harm, but in order to ensure that our customers can use our products securely, we would like to inform you of the following workarounds for this issue.
These vulnerabilities affect the EOS-series digital SLR and mirrorless cameras PowerShot SX740 HS,PowerShot SX70 HS,PowerShot G5X Mark II.
There is an increased use of PCs and mobile devices in an unsecure (free Wi-Fi) network environment where customers are not aware of the network security. As it has become prevalent to transfer images from a camera to a mobile device via Wi-Fi connection, we will implement firmware updates for the following models that are equipped with the Wi-Fi function.
*1. These models require a WiFi adapter or a Wireless File Transmitter to support WiFi connectivity.
*2. Ethernet connections can also permit these vulnerabilities.
Firmware update information will be provided for each product.
Should you have any questions about the announcement, please contact the Authorized Service Facility in your area or you may contact the Call Center within your region.