CVE-2023-6229

critical

Description

Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

References

https://www.darkreading.com/endpoint-security/critical-bugs-canon-small-office-printers-code-execution-ddos?&web_view=true

https://thecyberthrone.in/2024/02/06/canon-patches-several-vulnerabilities/

https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers

https://www.canon-europe.com/support/product-security-latest-news/

https://psirt.canon/advisory-information/cp2024-001/

https://canon.jp/support/support-info/240205vulnerability-response

Details

Source: Mitre, NVD

Published: 2024-02-06

Updated: 2024-02-13

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical