Advisory for Data Collection Agent (CDCA) Third-Party Component Updates

Thank you for your support. We would like to inform our corporate customers who use the CDCA application that there are third‑party component issues affecting the embedded proxy module in the application. These issues are related to the open-source Squid proxy, which the agent uses to manage service communication.

These component-level issues may result in temporary service interruptions or unintended exposure of proxy authentication credentials, but they do not impact the customer systems and data.

Affected versions

Data Collection Agent versions 2.0.2 through 2.0.4.

CVE coverage

• CVE-2025-62168
• CVE-2024-45802
• CVE-2024-37894
• CVE-2024-25617
• CVE-2024-25111
• CVE-2023-49286
• CVE-2023-49285
• CVE-2022-41317
• CVE-2021-46784
• CVE-2021-33620
• CVE-2021-31808
• CVE-2021-31807
• CVE-2021-31806
• CVE-2021-28662

Resolution

A new version of the CDCA is available and includes enhancements to address the abovementioned issues. Corporate customers should contact their local Canon sales company for assistance on installation of this update.

First Posted on 23 Jul 2026