TOKYO, February 15, 2023—Canon Inc. announced today that the company has established the Canon PSIRT (Product Security Incident Response Team), and a security website (https://psirt.canon) designed to gather and centralize information on, and respond to, product and service vulnerabilities. In addition, the company has strengthened its vulnerability countermeasures by being authorized (1) as a CNA (CVE Numbering Authority), which empowers the company to index and publish vulnerability information by assigning an internationally recognized CVE (Common Vulnerabilities and Exposures) ID.
This will empower Canon to respond swiftly to security researchers and promote early discovery and resolution of security-related issues.
1.Canon Inc. received an invitation from JPCERT Coordination Center (JPCERT/CC) to apply to become a CNA and was authorized by the CVE Program.
2. As the majority of security researchers communicate in English, Canon's security website operates with English as the standard language.
Security website Canon PSIRT (2): https://psirt.canon
A CVE ID is a unique identifier assigned to each vulnerability within the database managed by the CVE Program, an international initiative aimed at discovering vulnerabilities. By managing a unified system that assigns a unique CVE ID to each vulnerability, it is easier to share information and associate additional information with that vulnerability. Canon, now authorized as a CNA, can assign and publish CVE IDs for Canon product and service vulnerabilities. This enables CVE IDs, conventionally indexed by third-parties, to be more quickly identified and judged, thus helping Canon to index the product or service vulnerability. In turn, this framework is expected to make possible more prompt resolutions to security-related issues.
Going forward, Canon will continue striving to ensure customers can use the company's products and services with peace of mind through the strengthening of vulnerability countermeasures and continuous efforts to improve the level of security.
Going forward, Canon will continue striving to ensure customers can use the company's products and services with peace of mind through the strengthening of vulnerability countermeasures and continuous efforts to improve the level of security.
1.Canon Inc. received an invitation from JPCERT Coordination Center (JPCERT/CC) to apply to become a CNA and was authorized by the CVE Program.
2. As the majority of security researchers communicate in English, Canon's security website operates with English as the standard language.
Canon Press Release: Global Canon