Vulnerabilites related to canon - lbp236dw_firmware
Vulnerability from fkie_nvd
Published
2023-03-28 19:15
Modified
2024-11-21 06:50
Severity ?
Summary
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15845.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1620_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "15668373-079A-41AC-A516-6AD7970F6302", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1620:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C3B7A0A-5B06-45B7-B4FB-9D38159C8360", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1650_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7772BD87-3CFD-460A-9BF4-6EBE16DA40FE", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1650:-:*:*:*:*:*:*:*", "matchCriteriaId": "18CD7059-03A1-4293-B816-2340FF57C1CF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1520_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B47EF7B-FB77-4C5D-BF69-81B2841B29DA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1520:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD54CF32-28C5-4CA4-AEF9-FEDFA0F8CEEA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1550_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9C674A6-5C6A-4BAE-93C9-24C0DB713F38", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1550:-:*:*:*:*:*:*:*", "matchCriteriaId": "B17E8970-A8D6-41CF-9395-6F0665041B70", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1127c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E16F2E29-3D84-477E-9E54-BA264827145E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1127c:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C931E6-D17B-42BA-8CF8-9DCFDE719FBF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6AFF8736-9DFC-4F7A-8C0E-282AFFF91DE3", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238:-:*:*:*:*:*:*:*", "matchCriteriaId": "53576478-F63E-4FF5-B126-A710F044A338", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C8FDE716-D740-4429-888E-8CC70E42C318", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "49849B4F-10F8-4C10-8228-D45512828DED", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7BA2C9F-D027-4B08-B7CB-443B68183F1A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf414dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA04E81E-9B5C-4247-A016-7C3E5B80C650", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf414dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C5895AB-DC15-418B-9F51-12F3C7154E81", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf416dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "03AD4838-77A1-4146-8656-ED2590364E51", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf416dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D41B4F6-BB32-4BF1-9AC5-FF55D2DD3A08", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf419dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "39E61075-1802-4D87-A798-DB5736EC4204", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf419dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "71F9B5D5-1A77-47A9-ACBB-3EEAAE1020BA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf515dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9E4AEBE5-AC1C-49AD-A14D-D52BF419BF67", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf515dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "08ADFAE2-2CC5-4DE2-A3ED-854209E8AE51", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf424dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "178B5214-B342-474B-8B24-1C1867E54EC1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf424dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A9478F3-E2B2-457E-8016-482FC32D66C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf426dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D186EBD-F595-4DBF-9909-E9313DA78FF8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf426dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AC35A22-0707-44D2-8A10-68683E26F48A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf429dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ED0CE77A-AE86-439E-B31D-7A25E0920734", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf429dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9EA8717-E246-4B33-A360-B03980E5A912", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf525dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DBA6D70D-9F93-4874-9CC6-CD5BB6A085E9", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf525dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "54FB0798-2D46-4D1F-9CCC-1C152A48FD1B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf445dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C64E6D89-E618-40CD-BAAD-4620D588B71A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf445dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "830E5FF6-D946-430C-B703-B0C566FC417D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf448dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "76957E41-D930-4433-A351-DCA21C96BA7B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf448dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "4DC3461A-FBD5-4AFD-BD2A-F599C25D923C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf449dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E618B6D-051A-42A0-B0D5-D494BE00824B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf449dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4781211-E9EF-4249-9D05-E554F8539603", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf543dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB3E2FAF-265B-41E0-AE25-3AF2D40D65BA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf543dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "71F25DE1-C3FA-4028-93AC-A29C942E30A4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf451dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B686CAC-FE1A-41B7-B4C0-F017BAF2B616", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf452dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4DB4D90-C425-450E-BCC6-713EF2337EB0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf453dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F10CE6FC-FF7B-49AE-A253-756A4A9F01F5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf455dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B57EA41-4CB7-4307-AD3C-EC585EA43931", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf6160dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE489EBB-1360-44CF-B90D-41A7CB93AC3C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf6160dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "D68B7F69-1D72-46E1-A995-DA60CDADE9B5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf6180dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "66C01424-9C94-4D23-B884-9F9AE44FDE78", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf6180dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "670B32A5-8FE1-4FB9-BCE3-5E3BBB7DFC2E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf624cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C3932F5-8A0F-40E9-97B9-6511DCB9A520", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf624cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF6EF46D-20B5-4C0C-B3A1-2A5792DF3921", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf628cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DC528B8-F319-4C45-AA23-6281BB25866B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf628cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "9744D4DE-44CB-4C9E-842B-110EBC563E14", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf632cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "67F985E9-E2D2-4E72-AFD5-93B4AB2C91DD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf632cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "211C7805-B8E9-45AA-BEAF-E2FAE1ADA38B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf634cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B20020B-CD53-4F45-84C1-1D78485A6CF7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf634cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CA846B9-734F-49B4-AE52-E9A866FAD805", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf641cw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "16FF930B-A284-4A42-B785-A6B68CEE37CB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf641cw:-:*:*:*:*:*:*:*", "matchCriteriaId": "DAC2B0D1-07FE-41E8-A0F9-E68AE1244E4C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf642cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE04C9E3-6E14-42D5-A2F7-7C5676908CC8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf642cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F13D6E6-4398-4A89-A063-F36D2691E0A5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf644cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2D905474-6B8F-417C-84C7-F6038BDB9EA7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf644cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC602D53-5FD1-4F62-9431-AEAC6076C0C3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf726cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "94C88093-B54E-4D5B-AAA6-E797F98E06CD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf726cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "67E191E1-5638-451A-AD2B-46F1406EAAE9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf729cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ACDF7CC0-81E3-4F3F-ACA3-627E3699EBB6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf729cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1BF05F20-FAB2-4A06-9047-26B9A488EFA8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf731cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "66B988AF-E9DD-42DD-9A00-F599BE2CB435", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf731cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBB42C14-031B-4D50-A40A-369EE3B1D787", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf733cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB6E8F99-BB6A-4851-A0DA-2C377706551A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf733cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0E588515-488C-4121-B507-451DD6E982DE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf735cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6EBA1F6D-A76B-4792-AA83-572EF227B15D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf735cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "29563BF7-5C67-43AE-951B-9D87F7FFF67E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf741cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "302C8682-E8BA-4473-975E-2AE63A4A66C5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf741cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC94C4FA-3C3E-4350-9C59-F24B92A180EC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf743cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "889A71CA-3CC1-41F6-8AEA-BD8641FAFE85", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf743cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "477D80CC-BB3B-43C8-BC73-88067E3E6D95", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf745cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4A93FD38-1C55-44CB-A76E-5833B81D372D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf745cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C15A1B4A-FB79-4F59-BB3D-601FF365D42A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf746cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4702B92C-28BC-4ABB-BA20-31E89D064F52", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf746cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "822F1692-E54A-4C9A-B84D-49838275379A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf810cdn_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEDABF88-285C-40D6-B072-27D90B682710", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf810cdn:-:*:*:*:*:*:*:*", "matchCriteriaId": "71799D6F-CEE5-453A-AA87-CA4E7D192ED4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf820cdn_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "04AFBB56-DE94-4A6C-A549-981B1B51875D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf820cdn:-:*:*:*:*:*:*:*", "matchCriteriaId": "54B84F10-B284-4E16-911A-C85AF17D0992", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf8280cw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "78A9BB75-AEA9-4A60-BFF7-F66CCD538022", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf8280cw:-:*:*:*:*:*:*:*", "matchCriteriaId": "A34C6A54-55FE-4058-8572-EDF6684FBB12", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf8580cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD09742F-B0E8-43BE-802F-0BCDFA90719D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf8580cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DF21A50-E0B2-4DD7-A25E-2FC81BF9816E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1127c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D803E667-FC7A-4080-89CF-3DA095423588", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1127c:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BB68BB-B615-42AF-A73A-E0FC68A53083", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F4A24CA-B202-42F6-81C6-6B2236D05230", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238:-:*:*:*:*:*:*:*", "matchCriteriaId": "59C4637D-CDA4-4B3A-97D8-E5EC42D7CBE2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "242975D9-146A-41CB-8A36-02294833AF86", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp214dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "951828B7-4252-4F53-8D1F-69A96BC64AA7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp214dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1128100B-599E-4F7B-9F70-29F58A03B69F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp215dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0680685B-CF30-4E3E-A93F-E8EC7741D34D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp215dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA1F296D-8603-4CC8-A0F2-0A534D6F0821", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp226dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DCA53969-9547-40A6-A3FD-3FBC890933A7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp226dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B675F4A-94B9-4EE3-A5C8-0B0AB6553AB6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp227dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD4D8AAE-8305-450C-A879-D827416242E2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp227dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1342AAA1-46A1-4AE3-88DB-D7B8A1B8C886", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp228dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E693A81C-585B-48E5-BB2D-E4D087D8DADE", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp228dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0E81F7B6-D44C-4EF4-97BE-D0720CA4DAEE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0C45C9CF-59EA-46CD-BEF5-3ED1F012047F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B33E6D9-AAFD-4C35-BB47-878D262ED3B2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp251dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0DADFA76-304D-4FCC-85FE-0CEB20D8721E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp251dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "D78D1B6C-ADA4-41F0-B8FD-F8FEA9D60254", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp253dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FDBE83A-DB1C-4747-ABD5-7CFE5D75370B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp253dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6F9600C-9B9B-41FE-89A0-9C8987CDD180", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp612cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "59BA8E9A-631F-4993-902C-69D0A0663142", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp612cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B9E2C22-D7D2-42AA-9993-0E979CC16571", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp622cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "456ED00B-90C0-4312-A6C0-B530421AE583", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp622cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FDA8495-62CF-4157-8C19-C128B71CE127", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp623cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5FB59A2-811C-49AE-8417-826D1ABB0F73", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp623cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "452564A5-7EEA-436D-A573-051916CEFF5F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp654cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "538C039A-B281-42E2-81CD-1F4513017541", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp654cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D3DEDDF-7EB7-4352-91DC-9F3E0C1838AE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp664cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AC06A69-8B3F-4386-861D-141EA126B281", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp664cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "67B20C6A-FA1D-42F7-96F0-80423B3CEBCC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:ir1435i_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "83FC8412-91E0-4C0F-A712-57CC4034206B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:ir1435i:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB866FC0-1CC5-4C0C-8112-F8D861DC3568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435if_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "24C5B9AF-D802-4A87-97D3-DFB1C2FC5324", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435if:-:*:*:*:*:*:*:*", "matchCriteriaId": "472C43B4-B2D6-497E-B4E1-54721A5313E1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE13E6A2-B9AA-44F4-A442-C6BC867E2BC2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F3980C1-25E6-4C28-9FB8-7E5AF9504062", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435i\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2B56AE64-2431-4F62-A6C4-6FED787DD20F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435i\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "91C7033F-1CED-4BBE-A326-8CD8276FCD5B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435if\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FE1CD30-2114-4EBE-A547-65E631A306CD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435if\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AC6698D-E1E7-433F-B986-22A5EDEFD906", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435p\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "51E1166F-7FEC-4378-8F79-ADFB7CEBCB2C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435p\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D031276-5598-4D77-8E38-92A34088A0C7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:ir1643i_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C34A43F8-9B38-488A-BA2A-3632C5E46572", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:ir1643i:-:*:*:*:*:*:*:*", "matchCriteriaId": "17D650C2-89C5-4E08-86DD-E8DBA2CAB0FF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:ir1643if_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E85C2B32-4012-41B9-A3BC-05DA5681E935", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:ir1643if:-:*:*:*:*:*:*:*", "matchCriteriaId": "ECEAE445-DE08-4405-9123-3BA7D07804F0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7240_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "59224583-7519-4F58-8CE5-6DAA7288D2FF", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7240:-:*:*:*:*:*:*:*", "matchCriteriaId": "ADDF222F-3670-4858-B08F-A99BF8772E83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7250_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E7585CD5-DEB1-45B8-96E2-EACBD67FA6E2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7250:-:*:*:*:*:*:*:*", "matchCriteriaId": "26BC95D9-7760-4F93-B11B-FD6F4C02FDF0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7250f_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2EBAEF3-C3DD-4332-BAF0-6D6202105723", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7250f:-:*:*:*:*:*:*:*", "matchCriteriaId": "67707FE7-6294-4E1F-BCD6-71C2E3C70476", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7250z_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BABBA55E-CBFD-44A4-A081-9F78E9A32295", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7250z:-:*:*:*:*:*:*:*", "matchCriteriaId": "5889DD34-0DB6-41F7-BDE7-0B1D865C141E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15845." } ], "id": "CVE-2022-24673", "lastModified": "2024-11-21T06:50:50.387", "metrics": { "cvssMetricV30": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary" } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2023-03-28T19:15:10.793", "references": [ { "source": "zdi-disclosures@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/canon-laser-printer-inkjet-printer-and-small-office-multifunctional-printer-measure-against-buffer-overflow" }, { "source": "zdi-disclosures@trendmicro.com", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-515/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/canon-laser-printer-inkjet-printer-and-small-office-multifunctional-printer-measure-against-buffer-overflow" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-515/" } ], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-121" } ], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2024-02-06 01:15
Modified
2024-11-21 08:43
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B687D449-54F5-4CD8-A568-25CFA173ED9F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DA70BF1-168D-4C48-8BFD-FC188AA980F6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14329C7B-5E37-49E7-A184-DA8663180193", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "16D08A08-7DF2-4A2A-AB1D-70691FDE2414", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C80D7DD5-0336-4DA2-AED5-8798DA90452E", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0143F7DE-A138-4432-906A-CCE977E7C568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEBE2142-C96A-45E2-843C-561BEB1CBDE4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*", "matchCriteriaId": "B70D4546-C25E-45DB-AA32-39F4D28E5E7B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "62EDB563-4C00-4000-AB2E-DD3C8A0C8E9B", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*", "matchCriteriaId": "334E3779-A716-4906-8655-40EBA0FB25D6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "63CD0614-C27D-4943-9E82-89C37F607683", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*", "matchCriteriaId": "D69F2F6D-D4A1-4202-A4D1-65CE5E2009AF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7E8FFA6-507F-48F1-9009-B93AB6D11728", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE8F0188-DC21-4E4C-A65D-BE396D2F985F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CB95B57-DBBB-4399-9F9D-F8C50B34F97F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "78D84DB1-06E6-4266-BCCE-66E994BC53EB", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C5E33FE-8FF2-41F2-A3C9-AD3371691EA1", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A6FD932E-3EEC-468C-9774-61B75EC7C214", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "28C55347-1C31-4243-9E52-D1CCAB566B46", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E56C960-DB4A-44A1-A1D6-BB5A992EF5F4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "488D2C9B-4804-46C0-A213-3E0DD1A825B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D723AA9D-4300-49C0-8F79-11D30A23B308", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8EE99149-1D38-4F75-9E64-AEB83D510E5A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "64483A35-5AE7-42CD-AAE3-17C6C43D95A5", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "860DACEE-F948-46B0-B480-3DCBE7B4A04F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D4345B2-6885-4B20-BF1E-A24BA8D8D277", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "647765AD-9423-4145-A564-A93CA3A51EBA", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2A6E61F-12D7-4C2F-A2E2-3D2C3128BCC7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "46609A4A-0D56-4CF8-B95F-DCC14156A966", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E37171D8-A8BF-495B-BFF1-7A28028E4A89", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2526FF3A-8073-48D6-80B7-C745FE831B10", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1565F93E-BD2C-406A-A189-2F9CD87C701C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF4C8EFB-FA5C-4987-BD68-CB379AAD77A7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F323311A-C361-4DFB-87ED-84A21290952F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "15BB27F4-A1DB-45C7-9E0A-93FCC6680113", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E33115E-D9E9-46CB-8A4D-09AAA2D369BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCF73502-0D10-47D5-AE86-433B6F968EED", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "2364E018-8831-4890-84C7-5A21090632FE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "653AD79A-4049-4737-B7E9-F4E04EF5D5D3", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A49E0C3-5396-43D5-96D1-18CC21343692", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A8C9FFF-471D-4696-BAFF-B917A579888A", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "935B1F49-2CEF-4473-81EE-87363B6AC24A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "58DC892E-FFDC-4A02-83FE-C08B23F96B63", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CD30D7B-65C0-4A26-8596-BA2B48366EB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFC869C2-0643-45C6-AF7B-63F5ECF8E2FD", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AA4F7E3-E9FB-4553-9C01-4B4FE747D4E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D3964CC-B9AD-4FE6-8253-0A3E61111144", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA06896B-5637-4B23-92D1-DE7BB3C46D9E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" }, { "lang": "es", "value": "Desbordamiento de b\u00fafer en el proceso de descarga de recursos CPCA Color LUT de impresoras multifunci\u00f3n de oficina e impresoras l\u00e1ser (*) que puede permitir que un atacante en el segmento de red haga que el producto afectado no responda o ejecute c\u00f3digo arbitrario.*: Serie Satera LBP670C/Serie Satera MF750C firmware v03.07 y anteriores vendidos en Jap\u00f3n. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 y anteriores vendidos en EE. UU. Firmware i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series v03.07 y anteriores vendidos en Europa." } ], "id": "CVE-2023-6234", "lastModified": "2024-11-21T08:43:25.503", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2024-02-06T01:15:09.107", "references": [ { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" } ], "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2024-02-06 01:15
Modified
2024-11-21 08:43
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B687D449-54F5-4CD8-A568-25CFA173ED9F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DA70BF1-168D-4C48-8BFD-FC188AA980F6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14329C7B-5E37-49E7-A184-DA8663180193", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "16D08A08-7DF2-4A2A-AB1D-70691FDE2414", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C80D7DD5-0336-4DA2-AED5-8798DA90452E", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0143F7DE-A138-4432-906A-CCE977E7C568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEBE2142-C96A-45E2-843C-561BEB1CBDE4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*", "matchCriteriaId": "B70D4546-C25E-45DB-AA32-39F4D28E5E7B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "62EDB563-4C00-4000-AB2E-DD3C8A0C8E9B", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*", "matchCriteriaId": "334E3779-A716-4906-8655-40EBA0FB25D6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "63CD0614-C27D-4943-9E82-89C37F607683", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*", "matchCriteriaId": "D69F2F6D-D4A1-4202-A4D1-65CE5E2009AF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7E8FFA6-507F-48F1-9009-B93AB6D11728", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE8F0188-DC21-4E4C-A65D-BE396D2F985F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CB95B57-DBBB-4399-9F9D-F8C50B34F97F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "78D84DB1-06E6-4266-BCCE-66E994BC53EB", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C5E33FE-8FF2-41F2-A3C9-AD3371691EA1", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A6FD932E-3EEC-468C-9774-61B75EC7C214", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "28C55347-1C31-4243-9E52-D1CCAB566B46", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E56C960-DB4A-44A1-A1D6-BB5A992EF5F4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "488D2C9B-4804-46C0-A213-3E0DD1A825B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D723AA9D-4300-49C0-8F79-11D30A23B308", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8EE99149-1D38-4F75-9E64-AEB83D510E5A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "64483A35-5AE7-42CD-AAE3-17C6C43D95A5", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "860DACEE-F948-46B0-B480-3DCBE7B4A04F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D4345B2-6885-4B20-BF1E-A24BA8D8D277", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "647765AD-9423-4145-A564-A93CA3A51EBA", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2A6E61F-12D7-4C2F-A2E2-3D2C3128BCC7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "46609A4A-0D56-4CF8-B95F-DCC14156A966", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E37171D8-A8BF-495B-BFF1-7A28028E4A89", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2526FF3A-8073-48D6-80B7-C745FE831B10", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1565F93E-BD2C-406A-A189-2F9CD87C701C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF4C8EFB-FA5C-4987-BD68-CB379AAD77A7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F323311A-C361-4DFB-87ED-84A21290952F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "15BB27F4-A1DB-45C7-9E0A-93FCC6680113", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E33115E-D9E9-46CB-8A4D-09AAA2D369BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCF73502-0D10-47D5-AE86-433B6F968EED", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "2364E018-8831-4890-84C7-5A21090632FE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "653AD79A-4049-4737-B7E9-F4E04EF5D5D3", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A49E0C3-5396-43D5-96D1-18CC21343692", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A8C9FFF-471D-4696-BAFF-B917A579888A", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "935B1F49-2CEF-4473-81EE-87363B6AC24A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "58DC892E-FFDC-4A02-83FE-C08B23F96B63", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CD30D7B-65C0-4A26-8596-BA2B48366EB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFC869C2-0643-45C6-AF7B-63F5ECF8E2FD", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AA4F7E3-E9FB-4553-9C01-4B4FE747D4E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D3964CC-B9AD-4FE6-8253-0A3E61111144", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA06896B-5637-4B23-92D1-DE7BB3C46D9E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" }, { "lang": "es", "value": "Desbordamiento de b\u00fafer en el proceso de descarga de recursos CPCA PDL de impresoras multifunci\u00f3n de oficina e impresoras l\u00e1ser (*) que puede permitir que un atacante en el segmento de red haga que el producto afectado no responda o ejecute c\u00f3digo arbitrario.*: firmware Satera LBP670C Series/Satera MF750C Series v03.07 y anteriores vendidos en Jap\u00f3n. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 y anteriores vendidos en EE. UU. Firmware i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series v03.07 y anteriores vendidos en Europa." } ], "id": "CVE-2023-6229", "lastModified": "2024-11-21T08:43:24.620", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2024-02-06T01:15:08.137", "references": [ { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" } ], "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2024-02-06 01:15
Modified
2024-11-21 08:43
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B687D449-54F5-4CD8-A568-25CFA173ED9F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DA70BF1-168D-4C48-8BFD-FC188AA980F6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14329C7B-5E37-49E7-A184-DA8663180193", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "16D08A08-7DF2-4A2A-AB1D-70691FDE2414", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C80D7DD5-0336-4DA2-AED5-8798DA90452E", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0143F7DE-A138-4432-906A-CCE977E7C568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEBE2142-C96A-45E2-843C-561BEB1CBDE4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*", "matchCriteriaId": "B70D4546-C25E-45DB-AA32-39F4D28E5E7B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "62EDB563-4C00-4000-AB2E-DD3C8A0C8E9B", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*", "matchCriteriaId": "334E3779-A716-4906-8655-40EBA0FB25D6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "63CD0614-C27D-4943-9E82-89C37F607683", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*", "matchCriteriaId": "D69F2F6D-D4A1-4202-A4D1-65CE5E2009AF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7E8FFA6-507F-48F1-9009-B93AB6D11728", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE8F0188-DC21-4E4C-A65D-BE396D2F985F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CB95B57-DBBB-4399-9F9D-F8C50B34F97F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "78D84DB1-06E6-4266-BCCE-66E994BC53EB", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C5E33FE-8FF2-41F2-A3C9-AD3371691EA1", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A6FD932E-3EEC-468C-9774-61B75EC7C214", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "28C55347-1C31-4243-9E52-D1CCAB566B46", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E56C960-DB4A-44A1-A1D6-BB5A992EF5F4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "488D2C9B-4804-46C0-A213-3E0DD1A825B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D723AA9D-4300-49C0-8F79-11D30A23B308", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8EE99149-1D38-4F75-9E64-AEB83D510E5A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "64483A35-5AE7-42CD-AAE3-17C6C43D95A5", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "860DACEE-F948-46B0-B480-3DCBE7B4A04F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D4345B2-6885-4B20-BF1E-A24BA8D8D277", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "647765AD-9423-4145-A564-A93CA3A51EBA", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2A6E61F-12D7-4C2F-A2E2-3D2C3128BCC7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "46609A4A-0D56-4CF8-B95F-DCC14156A966", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E37171D8-A8BF-495B-BFF1-7A28028E4A89", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2526FF3A-8073-48D6-80B7-C745FE831B10", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1565F93E-BD2C-406A-A189-2F9CD87C701C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF4C8EFB-FA5C-4987-BD68-CB379AAD77A7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F323311A-C361-4DFB-87ED-84A21290952F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "15BB27F4-A1DB-45C7-9E0A-93FCC6680113", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E33115E-D9E9-46CB-8A4D-09AAA2D369BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCF73502-0D10-47D5-AE86-433B6F968EED", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "2364E018-8831-4890-84C7-5A21090632FE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "653AD79A-4049-4737-B7E9-F4E04EF5D5D3", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A49E0C3-5396-43D5-96D1-18CC21343692", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A8C9FFF-471D-4696-BAFF-B917A579888A", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "935B1F49-2CEF-4473-81EE-87363B6AC24A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "58DC892E-FFDC-4A02-83FE-C08B23F96B63", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CD30D7B-65C0-4A26-8596-BA2B48366EB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFC869C2-0643-45C6-AF7B-63F5ECF8E2FD", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AA4F7E3-E9FB-4553-9C01-4B4FE747D4E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D3964CC-B9AD-4FE6-8253-0A3E61111144", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA06896B-5637-4B23-92D1-DE7BB3C46D9E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" }, { "lang": "es", "value": "Desbordamiento de b\u00fafer en el proceso de contrase\u00f1a de la libreta de direcciones en la autenticaci\u00f3n de la funci\u00f3n de dispositivo m\u00f3vil de impresoras multifunci\u00f3n de oficina e impresoras l\u00e1ser (*) que puede permitir que un atacante en el segmento de red haga que el producto afectado no responda o ejecute c\u00f3digo arbitrario.*: Satera LBP670C Firmware v03.07 de la serie/Satera MF750C y versiones anteriores vendidas en Jap\u00f3n. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 y anteriores vendidos en EE. UU. Firmware i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series v03.07 y anteriores vendidos en Europa." } ], "id": "CVE-2023-6230", "lastModified": "2024-11-21T08:43:24.813", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2024-02-06T01:15:08.350", "references": [ { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" } ], "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2024-02-06 01:15
Modified
2024-11-21 08:43
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B687D449-54F5-4CD8-A568-25CFA173ED9F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DA70BF1-168D-4C48-8BFD-FC188AA980F6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14329C7B-5E37-49E7-A184-DA8663180193", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "16D08A08-7DF2-4A2A-AB1D-70691FDE2414", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C80D7DD5-0336-4DA2-AED5-8798DA90452E", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0143F7DE-A138-4432-906A-CCE977E7C568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEBE2142-C96A-45E2-843C-561BEB1CBDE4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*", "matchCriteriaId": "B70D4546-C25E-45DB-AA32-39F4D28E5E7B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "62EDB563-4C00-4000-AB2E-DD3C8A0C8E9B", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*", "matchCriteriaId": "334E3779-A716-4906-8655-40EBA0FB25D6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "63CD0614-C27D-4943-9E82-89C37F607683", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*", "matchCriteriaId": "D69F2F6D-D4A1-4202-A4D1-65CE5E2009AF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7E8FFA6-507F-48F1-9009-B93AB6D11728", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE8F0188-DC21-4E4C-A65D-BE396D2F985F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CB95B57-DBBB-4399-9F9D-F8C50B34F97F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "78D84DB1-06E6-4266-BCCE-66E994BC53EB", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C5E33FE-8FF2-41F2-A3C9-AD3371691EA1", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A6FD932E-3EEC-468C-9774-61B75EC7C214", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "28C55347-1C31-4243-9E52-D1CCAB566B46", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E56C960-DB4A-44A1-A1D6-BB5A992EF5F4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "488D2C9B-4804-46C0-A213-3E0DD1A825B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D723AA9D-4300-49C0-8F79-11D30A23B308", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8EE99149-1D38-4F75-9E64-AEB83D510E5A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "64483A35-5AE7-42CD-AAE3-17C6C43D95A5", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "860DACEE-F948-46B0-B480-3DCBE7B4A04F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D4345B2-6885-4B20-BF1E-A24BA8D8D277", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "647765AD-9423-4145-A564-A93CA3A51EBA", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2A6E61F-12D7-4C2F-A2E2-3D2C3128BCC7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "46609A4A-0D56-4CF8-B95F-DCC14156A966", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E37171D8-A8BF-495B-BFF1-7A28028E4A89", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2526FF3A-8073-48D6-80B7-C745FE831B10", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1565F93E-BD2C-406A-A189-2F9CD87C701C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF4C8EFB-FA5C-4987-BD68-CB379AAD77A7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F323311A-C361-4DFB-87ED-84A21290952F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "15BB27F4-A1DB-45C7-9E0A-93FCC6680113", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E33115E-D9E9-46CB-8A4D-09AAA2D369BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCF73502-0D10-47D5-AE86-433B6F968EED", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "2364E018-8831-4890-84C7-5A21090632FE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "653AD79A-4049-4737-B7E9-F4E04EF5D5D3", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A49E0C3-5396-43D5-96D1-18CC21343692", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A8C9FFF-471D-4696-BAFF-B917A579888A", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "935B1F49-2CEF-4473-81EE-87363B6AC24A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "58DC892E-FFDC-4A02-83FE-C08B23F96B63", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CD30D7B-65C0-4A26-8596-BA2B48366EB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFC869C2-0643-45C6-AF7B-63F5ECF8E2FD", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AA4F7E3-E9FB-4553-9C01-4B4FE747D4E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D3964CC-B9AD-4FE6-8253-0A3E61111144", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA06896B-5637-4B23-92D1-DE7BB3C46D9E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" }, { "lang": "es", "value": "Desbordamiento de b\u00fafer en el proceso de solicitud de sonda WSD de impresoras multifunci\u00f3n de oficina e impresoras l\u00e1ser (*), lo que puede permitir que un atacante en el segmento de red haga que el producto afectado no responda o ejecute c\u00f3digo arbitrario.*: firmware Satera LBP670C Series/Satera MF750C Series v03 .07 y anteriores vendidos en Jap\u00f3n. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 y anteriores vendidos en EE. UU. Firmware i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series v03.07 y anteriores vendidos en Europa." } ], "id": "CVE-2023-6231", "lastModified": "2024-11-21T08:43:24.990", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2024-02-06T01:15:08.547", "references": [ { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" } ], "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2023-03-28 19:15
Modified
2024-11-21 06:50
Severity ?
Summary
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15834.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1620_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "15668373-079A-41AC-A516-6AD7970F6302", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1620:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C3B7A0A-5B06-45B7-B4FB-9D38159C8360", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1650_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7772BD87-3CFD-460A-9BF4-6EBE16DA40FE", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1650:-:*:*:*:*:*:*:*", "matchCriteriaId": "18CD7059-03A1-4293-B816-2340FF57C1CF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1520_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B47EF7B-FB77-4C5D-BF69-81B2841B29DA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1520:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD54CF32-28C5-4CA4-AEF9-FEDFA0F8CEEA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1550_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9C674A6-5C6A-4BAE-93C9-24C0DB713F38", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1550:-:*:*:*:*:*:*:*", "matchCriteriaId": "B17E8970-A8D6-41CF-9395-6F0665041B70", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1127c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E16F2E29-3D84-477E-9E54-BA264827145E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1127c:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C931E6-D17B-42BA-8CF8-9DCFDE719FBF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6AFF8736-9DFC-4F7A-8C0E-282AFFF91DE3", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238:-:*:*:*:*:*:*:*", "matchCriteriaId": "53576478-F63E-4FF5-B126-A710F044A338", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C8FDE716-D740-4429-888E-8CC70E42C318", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "49849B4F-10F8-4C10-8228-D45512828DED", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7BA2C9F-D027-4B08-B7CB-443B68183F1A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf414dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA04E81E-9B5C-4247-A016-7C3E5B80C650", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf414dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C5895AB-DC15-418B-9F51-12F3C7154E81", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf416dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "03AD4838-77A1-4146-8656-ED2590364E51", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf416dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D41B4F6-BB32-4BF1-9AC5-FF55D2DD3A08", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf419dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "39E61075-1802-4D87-A798-DB5736EC4204", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf419dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "71F9B5D5-1A77-47A9-ACBB-3EEAAE1020BA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf515dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9E4AEBE5-AC1C-49AD-A14D-D52BF419BF67", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf515dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "08ADFAE2-2CC5-4DE2-A3ED-854209E8AE51", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf424dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "178B5214-B342-474B-8B24-1C1867E54EC1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf424dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A9478F3-E2B2-457E-8016-482FC32D66C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf426dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D186EBD-F595-4DBF-9909-E9313DA78FF8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf426dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AC35A22-0707-44D2-8A10-68683E26F48A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf429dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ED0CE77A-AE86-439E-B31D-7A25E0920734", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf429dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9EA8717-E246-4B33-A360-B03980E5A912", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf525dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DBA6D70D-9F93-4874-9CC6-CD5BB6A085E9", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf525dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "54FB0798-2D46-4D1F-9CCC-1C152A48FD1B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf445dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C64E6D89-E618-40CD-BAAD-4620D588B71A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf445dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "830E5FF6-D946-430C-B703-B0C566FC417D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf448dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "76957E41-D930-4433-A351-DCA21C96BA7B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf448dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "4DC3461A-FBD5-4AFD-BD2A-F599C25D923C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf449dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E618B6D-051A-42A0-B0D5-D494BE00824B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf449dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4781211-E9EF-4249-9D05-E554F8539603", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf543dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB3E2FAF-265B-41E0-AE25-3AF2D40D65BA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf543dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "71F25DE1-C3FA-4028-93AC-A29C942E30A4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf451dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B686CAC-FE1A-41B7-B4C0-F017BAF2B616", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf452dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4DB4D90-C425-450E-BCC6-713EF2337EB0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf453dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F10CE6FC-FF7B-49AE-A253-756A4A9F01F5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf455dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B57EA41-4CB7-4307-AD3C-EC585EA43931", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf6160dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE489EBB-1360-44CF-B90D-41A7CB93AC3C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf6160dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "D68B7F69-1D72-46E1-A995-DA60CDADE9B5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf6180dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "66C01424-9C94-4D23-B884-9F9AE44FDE78", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf6180dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "670B32A5-8FE1-4FB9-BCE3-5E3BBB7DFC2E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf624cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C3932F5-8A0F-40E9-97B9-6511DCB9A520", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf624cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF6EF46D-20B5-4C0C-B3A1-2A5792DF3921", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf628cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DC528B8-F319-4C45-AA23-6281BB25866B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf628cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "9744D4DE-44CB-4C9E-842B-110EBC563E14", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf632cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "67F985E9-E2D2-4E72-AFD5-93B4AB2C91DD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf632cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "211C7805-B8E9-45AA-BEAF-E2FAE1ADA38B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf634cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B20020B-CD53-4F45-84C1-1D78485A6CF7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf634cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CA846B9-734F-49B4-AE52-E9A866FAD805", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf641cw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "16FF930B-A284-4A42-B785-A6B68CEE37CB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf641cw:-:*:*:*:*:*:*:*", "matchCriteriaId": "DAC2B0D1-07FE-41E8-A0F9-E68AE1244E4C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf642cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE04C9E3-6E14-42D5-A2F7-7C5676908CC8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf642cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F13D6E6-4398-4A89-A063-F36D2691E0A5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf644cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2D905474-6B8F-417C-84C7-F6038BDB9EA7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf644cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC602D53-5FD1-4F62-9431-AEAC6076C0C3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf726cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "94C88093-B54E-4D5B-AAA6-E797F98E06CD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf726cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "67E191E1-5638-451A-AD2B-46F1406EAAE9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf729cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ACDF7CC0-81E3-4F3F-ACA3-627E3699EBB6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf729cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1BF05F20-FAB2-4A06-9047-26B9A488EFA8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf731cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "66B988AF-E9DD-42DD-9A00-F599BE2CB435", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf731cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBB42C14-031B-4D50-A40A-369EE3B1D787", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf733cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB6E8F99-BB6A-4851-A0DA-2C377706551A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf733cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0E588515-488C-4121-B507-451DD6E982DE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf735cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6EBA1F6D-A76B-4792-AA83-572EF227B15D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf735cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "29563BF7-5C67-43AE-951B-9D87F7FFF67E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf741cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "302C8682-E8BA-4473-975E-2AE63A4A66C5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf741cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC94C4FA-3C3E-4350-9C59-F24B92A180EC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf743cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "889A71CA-3CC1-41F6-8AEA-BD8641FAFE85", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf743cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "477D80CC-BB3B-43C8-BC73-88067E3E6D95", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf745cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4A93FD38-1C55-44CB-A76E-5833B81D372D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf745cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C15A1B4A-FB79-4F59-BB3D-601FF365D42A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf746cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4702B92C-28BC-4ABB-BA20-31E89D064F52", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf746cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "822F1692-E54A-4C9A-B84D-49838275379A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf810cdn_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEDABF88-285C-40D6-B072-27D90B682710", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf810cdn:-:*:*:*:*:*:*:*", "matchCriteriaId": "71799D6F-CEE5-453A-AA87-CA4E7D192ED4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf820cdn_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "04AFBB56-DE94-4A6C-A549-981B1B51875D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf820cdn:-:*:*:*:*:*:*:*", "matchCriteriaId": "54B84F10-B284-4E16-911A-C85AF17D0992", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf8280cw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "78A9BB75-AEA9-4A60-BFF7-F66CCD538022", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf8280cw:-:*:*:*:*:*:*:*", "matchCriteriaId": "A34C6A54-55FE-4058-8572-EDF6684FBB12", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf8580cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD09742F-B0E8-43BE-802F-0BCDFA90719D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf8580cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DF21A50-E0B2-4DD7-A25E-2FC81BF9816E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1127c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D803E667-FC7A-4080-89CF-3DA095423588", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1127c:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BB68BB-B615-42AF-A73A-E0FC68A53083", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F4A24CA-B202-42F6-81C6-6B2236D05230", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238:-:*:*:*:*:*:*:*", "matchCriteriaId": "59C4637D-CDA4-4B3A-97D8-E5EC42D7CBE2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "242975D9-146A-41CB-8A36-02294833AF86", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp214dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "951828B7-4252-4F53-8D1F-69A96BC64AA7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp214dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1128100B-599E-4F7B-9F70-29F58A03B69F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp215dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0680685B-CF30-4E3E-A93F-E8EC7741D34D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp215dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA1F296D-8603-4CC8-A0F2-0A534D6F0821", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp226dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DCA53969-9547-40A6-A3FD-3FBC890933A7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp226dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B675F4A-94B9-4EE3-A5C8-0B0AB6553AB6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp227dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD4D8AAE-8305-450C-A879-D827416242E2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp227dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1342AAA1-46A1-4AE3-88DB-D7B8A1B8C886", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp228dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E693A81C-585B-48E5-BB2D-E4D087D8DADE", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp228dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0E81F7B6-D44C-4EF4-97BE-D0720CA4DAEE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0C45C9CF-59EA-46CD-BEF5-3ED1F012047F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B33E6D9-AAFD-4C35-BB47-878D262ED3B2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp251dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0DADFA76-304D-4FCC-85FE-0CEB20D8721E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp251dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "D78D1B6C-ADA4-41F0-B8FD-F8FEA9D60254", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp253dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FDBE83A-DB1C-4747-ABD5-7CFE5D75370B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp253dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6F9600C-9B9B-41FE-89A0-9C8987CDD180", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp612cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "59BA8E9A-631F-4993-902C-69D0A0663142", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp612cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B9E2C22-D7D2-42AA-9993-0E979CC16571", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp622cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "456ED00B-90C0-4312-A6C0-B530421AE583", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp622cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FDA8495-62CF-4157-8C19-C128B71CE127", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp623cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5FB59A2-811C-49AE-8417-826D1ABB0F73", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp623cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "452564A5-7EEA-436D-A573-051916CEFF5F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp654cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "538C039A-B281-42E2-81CD-1F4513017541", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp654cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D3DEDDF-7EB7-4352-91DC-9F3E0C1838AE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp664cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AC06A69-8B3F-4386-861D-141EA126B281", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp664cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "67B20C6A-FA1D-42F7-96F0-80423B3CEBCC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:ir1435i_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "83FC8412-91E0-4C0F-A712-57CC4034206B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:ir1435i:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB866FC0-1CC5-4C0C-8112-F8D861DC3568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435if_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "24C5B9AF-D802-4A87-97D3-DFB1C2FC5324", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435if:-:*:*:*:*:*:*:*", "matchCriteriaId": "472C43B4-B2D6-497E-B4E1-54721A5313E1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE13E6A2-B9AA-44F4-A442-C6BC867E2BC2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F3980C1-25E6-4C28-9FB8-7E5AF9504062", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435i\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2B56AE64-2431-4F62-A6C4-6FED787DD20F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435i\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "91C7033F-1CED-4BBE-A326-8CD8276FCD5B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435if\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FE1CD30-2114-4EBE-A547-65E631A306CD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435if\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AC6698D-E1E7-433F-B986-22A5EDEFD906", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435p\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "51E1166F-7FEC-4378-8F79-ADFB7CEBCB2C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435p\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D031276-5598-4D77-8E38-92A34088A0C7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:ir1643i_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C34A43F8-9B38-488A-BA2A-3632C5E46572", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:ir1643i:-:*:*:*:*:*:*:*", "matchCriteriaId": "17D650C2-89C5-4E08-86DD-E8DBA2CAB0FF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:ir1643if_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E85C2B32-4012-41B9-A3BC-05DA5681E935", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:ir1643if:-:*:*:*:*:*:*:*", "matchCriteriaId": "ECEAE445-DE08-4405-9123-3BA7D07804F0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7240_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "59224583-7519-4F58-8CE5-6DAA7288D2FF", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7240:-:*:*:*:*:*:*:*", "matchCriteriaId": "ADDF222F-3670-4858-B08F-A99BF8772E83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7250_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E7585CD5-DEB1-45B8-96E2-EACBD67FA6E2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7250:-:*:*:*:*:*:*:*", "matchCriteriaId": "26BC95D9-7760-4F93-B11B-FD6F4C02FDF0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7250f_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2EBAEF3-C3DD-4332-BAF0-6D6202105723", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7250f:-:*:*:*:*:*:*:*", "matchCriteriaId": "67707FE7-6294-4E1F-BCD6-71C2E3C70476", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7250z_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BABBA55E-CBFD-44A4-A081-9F78E9A32295", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7250z:-:*:*:*:*:*:*:*", "matchCriteriaId": "5889DD34-0DB6-41F7-BDE7-0B1D865C141E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15834." } ], "id": "CVE-2022-24674", "lastModified": "2024-11-21T06:50:50.587", "metrics": { "cvssMetricV30": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary" } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2023-03-28T19:15:10.867", "references": [ { "source": "zdi-disclosures@trendmicro.com", "tags": [ "Broken Link" ], "url": "https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/canon-laser-printer-and-small-office-multifunctional-printer-measure-against-buffer-overflow/" }, { "source": "zdi-disclosures@trendmicro.com", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-516/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Broken Link" ], "url": "https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/canon-laser-printer-and-small-office-multifunctional-printer-measure-against-buffer-overflow/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-516/" } ], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-121" } ], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2024-02-06 01:15
Modified
2024-11-21 08:43
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B687D449-54F5-4CD8-A568-25CFA173ED9F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DA70BF1-168D-4C48-8BFD-FC188AA980F6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14329C7B-5E37-49E7-A184-DA8663180193", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "16D08A08-7DF2-4A2A-AB1D-70691FDE2414", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C80D7DD5-0336-4DA2-AED5-8798DA90452E", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0143F7DE-A138-4432-906A-CCE977E7C568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEBE2142-C96A-45E2-843C-561BEB1CBDE4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*", "matchCriteriaId": "B70D4546-C25E-45DB-AA32-39F4D28E5E7B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "62EDB563-4C00-4000-AB2E-DD3C8A0C8E9B", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*", "matchCriteriaId": "334E3779-A716-4906-8655-40EBA0FB25D6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "63CD0614-C27D-4943-9E82-89C37F607683", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*", "matchCriteriaId": "D69F2F6D-D4A1-4202-A4D1-65CE5E2009AF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7E8FFA6-507F-48F1-9009-B93AB6D11728", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE8F0188-DC21-4E4C-A65D-BE396D2F985F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CB95B57-DBBB-4399-9F9D-F8C50B34F97F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "78D84DB1-06E6-4266-BCCE-66E994BC53EB", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C5E33FE-8FF2-41F2-A3C9-AD3371691EA1", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A6FD932E-3EEC-468C-9774-61B75EC7C214", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "28C55347-1C31-4243-9E52-D1CCAB566B46", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E56C960-DB4A-44A1-A1D6-BB5A992EF5F4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "488D2C9B-4804-46C0-A213-3E0DD1A825B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D723AA9D-4300-49C0-8F79-11D30A23B308", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8EE99149-1D38-4F75-9E64-AEB83D510E5A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "64483A35-5AE7-42CD-AAE3-17C6C43D95A5", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "860DACEE-F948-46B0-B480-3DCBE7B4A04F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D4345B2-6885-4B20-BF1E-A24BA8D8D277", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "647765AD-9423-4145-A564-A93CA3A51EBA", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2A6E61F-12D7-4C2F-A2E2-3D2C3128BCC7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "46609A4A-0D56-4CF8-B95F-DCC14156A966", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E37171D8-A8BF-495B-BFF1-7A28028E4A89", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2526FF3A-8073-48D6-80B7-C745FE831B10", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1565F93E-BD2C-406A-A189-2F9CD87C701C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF4C8EFB-FA5C-4987-BD68-CB379AAD77A7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F323311A-C361-4DFB-87ED-84A21290952F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "15BB27F4-A1DB-45C7-9E0A-93FCC6680113", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E33115E-D9E9-46CB-8A4D-09AAA2D369BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCF73502-0D10-47D5-AE86-433B6F968EED", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "2364E018-8831-4890-84C7-5A21090632FE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "653AD79A-4049-4737-B7E9-F4E04EF5D5D3", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A49E0C3-5396-43D5-96D1-18CC21343692", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A8C9FFF-471D-4696-BAFF-B917A579888A", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "935B1F49-2CEF-4473-81EE-87363B6AC24A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "58DC892E-FFDC-4A02-83FE-C08B23F96B63", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CD30D7B-65C0-4A26-8596-BA2B48366EB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFC869C2-0643-45C6-AF7B-63F5ECF8E2FD", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AA4F7E3-E9FB-4553-9C01-4B4FE747D4E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D3964CC-B9AD-4FE6-8253-0A3E61111144", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA06896B-5637-4B23-92D1-DE7BB3C46D9E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" }, { "lang": "es", "value": "Desbordamiento de b\u00fafer en el proceso de solicitud de atributos SLP de impresoras multifunci\u00f3n de oficina e impresoras l\u00e1ser (*) que puede permitir que un atacante en el segmento de red haga que el producto afectado no responda o ejecute c\u00f3digo arbitrario.*: firmware Satera LBP670C Series/Satera MF750C Series v03 .07 y anteriores vendidos en Jap\u00f3n. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 y anteriores vendidos en EE. UU. Firmware i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series v03.07 y anteriores vendidos en Europa." } ], "id": "CVE-2023-6233", "lastModified": "2024-11-21T08:43:25.333", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2024-02-06T01:15:08.930", "references": [ { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" } ], "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2023-03-28 19:15
Modified
2024-11-21 06:50
Severity ?
Summary
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15802.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1620_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "15668373-079A-41AC-A516-6AD7970F6302", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1620:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C3B7A0A-5B06-45B7-B4FB-9D38159C8360", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1650_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7772BD87-3CFD-460A-9BF4-6EBE16DA40FE", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1650:-:*:*:*:*:*:*:*", "matchCriteriaId": "18CD7059-03A1-4293-B816-2340FF57C1CF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1520_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B47EF7B-FB77-4C5D-BF69-81B2841B29DA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1520:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD54CF32-28C5-4CA4-AEF9-FEDFA0F8CEEA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:d1550_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9C674A6-5C6A-4BAE-93C9-24C0DB713F38", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:d1550:-:*:*:*:*:*:*:*", "matchCriteriaId": "B17E8970-A8D6-41CF-9395-6F0665041B70", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1127c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E16F2E29-3D84-477E-9E54-BA264827145E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1127c:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C931E6-D17B-42BA-8CF8-9DCFDE719FBF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6AFF8736-9DFC-4F7A-8C0E-282AFFF91DE3", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238:-:*:*:*:*:*:*:*", "matchCriteriaId": "53576478-F63E-4FF5-B126-A710F044A338", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C8FDE716-D740-4429-888E-8CC70E42C318", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "49849B4F-10F8-4C10-8228-D45512828DED", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7BA2C9F-D027-4B08-B7CB-443B68183F1A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf414dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA04E81E-9B5C-4247-A016-7C3E5B80C650", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf414dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C5895AB-DC15-418B-9F51-12F3C7154E81", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf416dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "03AD4838-77A1-4146-8656-ED2590364E51", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf416dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D41B4F6-BB32-4BF1-9AC5-FF55D2DD3A08", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf419dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "39E61075-1802-4D87-A798-DB5736EC4204", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf419dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "71F9B5D5-1A77-47A9-ACBB-3EEAAE1020BA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf515dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9E4AEBE5-AC1C-49AD-A14D-D52BF419BF67", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf515dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "08ADFAE2-2CC5-4DE2-A3ED-854209E8AE51", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf424dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "178B5214-B342-474B-8B24-1C1867E54EC1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf424dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A9478F3-E2B2-457E-8016-482FC32D66C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf426dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D186EBD-F595-4DBF-9909-E9313DA78FF8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf426dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AC35A22-0707-44D2-8A10-68683E26F48A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf429dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ED0CE77A-AE86-439E-B31D-7A25E0920734", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf429dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9EA8717-E246-4B33-A360-B03980E5A912", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf525dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DBA6D70D-9F93-4874-9CC6-CD5BB6A085E9", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf525dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "54FB0798-2D46-4D1F-9CCC-1C152A48FD1B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf445dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C64E6D89-E618-40CD-BAAD-4620D588B71A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf445dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "830E5FF6-D946-430C-B703-B0C566FC417D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf448dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "76957E41-D930-4433-A351-DCA21C96BA7B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf448dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "4DC3461A-FBD5-4AFD-BD2A-F599C25D923C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf449dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E618B6D-051A-42A0-B0D5-D494BE00824B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf449dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4781211-E9EF-4249-9D05-E554F8539603", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf543dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB3E2FAF-265B-41E0-AE25-3AF2D40D65BA", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf543dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "71F25DE1-C3FA-4028-93AC-A29C942E30A4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf451dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B686CAC-FE1A-41B7-B4C0-F017BAF2B616", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf452dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4DB4D90-C425-450E-BCC6-713EF2337EB0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf453dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F10CE6FC-FF7B-49AE-A253-756A4A9F01F5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf455dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B57EA41-4CB7-4307-AD3C-EC585EA43931", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf6160dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE489EBB-1360-44CF-B90D-41A7CB93AC3C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf6160dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "D68B7F69-1D72-46E1-A995-DA60CDADE9B5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf6180dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "66C01424-9C94-4D23-B884-9F9AE44FDE78", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf6180dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "670B32A5-8FE1-4FB9-BCE3-5E3BBB7DFC2E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf624cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1C3932F5-8A0F-40E9-97B9-6511DCB9A520", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf624cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF6EF46D-20B5-4C0C-B3A1-2A5792DF3921", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf628cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DC528B8-F319-4C45-AA23-6281BB25866B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf628cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "9744D4DE-44CB-4C9E-842B-110EBC563E14", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf632cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "67F985E9-E2D2-4E72-AFD5-93B4AB2C91DD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf632cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "211C7805-B8E9-45AA-BEAF-E2FAE1ADA38B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf634cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B20020B-CD53-4F45-84C1-1D78485A6CF7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf634cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CA846B9-734F-49B4-AE52-E9A866FAD805", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf641cw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "16FF930B-A284-4A42-B785-A6B68CEE37CB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf641cw:-:*:*:*:*:*:*:*", "matchCriteriaId": "DAC2B0D1-07FE-41E8-A0F9-E68AE1244E4C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf642cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE04C9E3-6E14-42D5-A2F7-7C5676908CC8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf642cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F13D6E6-4398-4A89-A063-F36D2691E0A5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf644cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2D905474-6B8F-417C-84C7-F6038BDB9EA7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf644cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC602D53-5FD1-4F62-9431-AEAC6076C0C3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf726cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "94C88093-B54E-4D5B-AAA6-E797F98E06CD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf726cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "67E191E1-5638-451A-AD2B-46F1406EAAE9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf729cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ACDF7CC0-81E3-4F3F-ACA3-627E3699EBB6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf729cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1BF05F20-FAB2-4A06-9047-26B9A488EFA8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf731cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "66B988AF-E9DD-42DD-9A00-F599BE2CB435", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf731cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBB42C14-031B-4D50-A40A-369EE3B1D787", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf733cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB6E8F99-BB6A-4851-A0DA-2C377706551A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf733cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0E588515-488C-4121-B507-451DD6E982DE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf735cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6EBA1F6D-A76B-4792-AA83-572EF227B15D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf735cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "29563BF7-5C67-43AE-951B-9D87F7FFF67E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf741cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "302C8682-E8BA-4473-975E-2AE63A4A66C5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf741cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC94C4FA-3C3E-4350-9C59-F24B92A180EC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf743cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "889A71CA-3CC1-41F6-8AEA-BD8641FAFE85", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf743cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "477D80CC-BB3B-43C8-BC73-88067E3E6D95", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf745cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4A93FD38-1C55-44CB-A76E-5833B81D372D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf745cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C15A1B4A-FB79-4F59-BB3D-601FF365D42A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf746cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4702B92C-28BC-4ABB-BA20-31E89D064F52", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf746cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "822F1692-E54A-4C9A-B84D-49838275379A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf810cdn_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEDABF88-285C-40D6-B072-27D90B682710", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf810cdn:-:*:*:*:*:*:*:*", "matchCriteriaId": "71799D6F-CEE5-453A-AA87-CA4E7D192ED4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf820cdn_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "04AFBB56-DE94-4A6C-A549-981B1B51875D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf820cdn:-:*:*:*:*:*:*:*", "matchCriteriaId": "54B84F10-B284-4E16-911A-C85AF17D0992", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf8280cw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "78A9BB75-AEA9-4A60-BFF7-F66CCD538022", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf8280cw:-:*:*:*:*:*:*:*", "matchCriteriaId": "A34C6A54-55FE-4058-8572-EDF6684FBB12", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf8580cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD09742F-B0E8-43BE-802F-0BCDFA90719D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf8580cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DF21A50-E0B2-4DD7-A25E-2FC81BF9816E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1127c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "D803E667-FC7A-4080-89CF-3DA095423588", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1127c:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BB68BB-B615-42AF-A73A-E0FC68A53083", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F4A24CA-B202-42F6-81C6-6B2236D05230", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238:-:*:*:*:*:*:*:*", "matchCriteriaId": "59C4637D-CDA4-4B3A-97D8-E5EC42D7CBE2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "242975D9-146A-41CB-8A36-02294833AF86", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp214dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "951828B7-4252-4F53-8D1F-69A96BC64AA7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp214dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1128100B-599E-4F7B-9F70-29F58A03B69F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp215dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0680685B-CF30-4E3E-A93F-E8EC7741D34D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp215dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA1F296D-8603-4CC8-A0F2-0A534D6F0821", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp226dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DCA53969-9547-40A6-A3FD-3FBC890933A7", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp226dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B675F4A-94B9-4EE3-A5C8-0B0AB6553AB6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp227dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD4D8AAE-8305-450C-A879-D827416242E2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp227dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "1342AAA1-46A1-4AE3-88DB-D7B8A1B8C886", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp228dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E693A81C-585B-48E5-BB2D-E4D087D8DADE", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp228dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0E81F7B6-D44C-4EF4-97BE-D0720CA4DAEE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0C45C9CF-59EA-46CD-BEF5-3ED1F012047F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B33E6D9-AAFD-4C35-BB47-878D262ED3B2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp251dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0DADFA76-304D-4FCC-85FE-0CEB20D8721E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp251dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "D78D1B6C-ADA4-41F0-B8FD-F8FEA9D60254", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp253dw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FDBE83A-DB1C-4747-ABD5-7CFE5D75370B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp253dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6F9600C-9B9B-41FE-89A0-9C8987CDD180", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp612cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "59BA8E9A-631F-4993-902C-69D0A0663142", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp612cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B9E2C22-D7D2-42AA-9993-0E979CC16571", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp622cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "456ED00B-90C0-4312-A6C0-B530421AE583", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp622cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FDA8495-62CF-4157-8C19-C128B71CE127", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp623cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5FB59A2-811C-49AE-8417-826D1ABB0F73", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp623cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "452564A5-7EEA-436D-A573-051916CEFF5F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp654cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "538C039A-B281-42E2-81CD-1F4513017541", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp654cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D3DEDDF-7EB7-4352-91DC-9F3E0C1838AE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp664cdw_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AC06A69-8B3F-4386-861D-141EA126B281", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp664cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "67B20C6A-FA1D-42F7-96F0-80423B3CEBCC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:ir1435i_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "83FC8412-91E0-4C0F-A712-57CC4034206B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:ir1435i:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB866FC0-1CC5-4C0C-8112-F8D861DC3568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435if_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "24C5B9AF-D802-4A87-97D3-DFB1C2FC5324", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435if:-:*:*:*:*:*:*:*", "matchCriteriaId": "472C43B4-B2D6-497E-B4E1-54721A5313E1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435p_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE13E6A2-B9AA-44F4-A442-C6BC867E2BC2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F3980C1-25E6-4C28-9FB8-7E5AF9504062", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435i\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2B56AE64-2431-4F62-A6C4-6FED787DD20F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435i\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "91C7033F-1CED-4BBE-A326-8CD8276FCD5B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435if\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FE1CD30-2114-4EBE-A547-65E631A306CD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435if\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AC6698D-E1E7-433F-B986-22A5EDEFD906", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:1435p\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "51E1166F-7FEC-4378-8F79-ADFB7CEBCB2C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:1435p\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D031276-5598-4D77-8E38-92A34088A0C7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:ir1643i_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C34A43F8-9B38-488A-BA2A-3632C5E46572", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:ir1643i:-:*:*:*:*:*:*:*", "matchCriteriaId": "17D650C2-89C5-4E08-86DD-E8DBA2CAB0FF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:ir1643if_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E85C2B32-4012-41B9-A3BC-05DA5681E935", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:ir1643if:-:*:*:*:*:*:*:*", "matchCriteriaId": "ECEAE445-DE08-4405-9123-3BA7D07804F0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7240_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "59224583-7519-4F58-8CE5-6DAA7288D2FF", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7240:-:*:*:*:*:*:*:*", "matchCriteriaId": "ADDF222F-3670-4858-B08F-A99BF8772E83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7250_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E7585CD5-DEB1-45B8-96E2-EACBD67FA6E2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7250:-:*:*:*:*:*:*:*", "matchCriteriaId": "26BC95D9-7760-4F93-B11B-FD6F4C02FDF0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7250f_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2EBAEF3-C3DD-4332-BAF0-6D6202105723", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7250f:-:*:*:*:*:*:*:*", "matchCriteriaId": "67707FE7-6294-4E1F-BCD6-71C2E3C70476", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:wg7250z_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BABBA55E-CBFD-44A4-A081-9F78E9A32295", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:wg7250z:-:*:*:*:*:*:*:*", "matchCriteriaId": "5889DD34-0DB6-41F7-BDE7-0B1D865C141E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15802." } ], "id": "CVE-2022-24672", "lastModified": "2024-11-21T06:50:50.187", "metrics": { "cvssMetricV30": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary" } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2023-03-28T19:15:10.727", "references": [ { "source": "zdi-disclosures@trendmicro.com", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/canon-laser-printer-inkjet-printer-and-small-office-multifunctio" }, { "source": "zdi-disclosures@trendmicro.com", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-514/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/canon-laser-printer-inkjet-printer-and-small-office-multifunctio" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-514/" } ], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-122" } ], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2024-02-06 01:15
Modified
2024-11-21 08:43
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B687D449-54F5-4CD8-A568-25CFA173ED9F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DA70BF1-168D-4C48-8BFD-FC188AA980F6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14329C7B-5E37-49E7-A184-DA8663180193", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "16D08A08-7DF2-4A2A-AB1D-70691FDE2414", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C80D7DD5-0336-4DA2-AED5-8798DA90452E", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "0143F7DE-A138-4432-906A-CCE977E7C568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEBE2142-C96A-45E2-843C-561BEB1CBDE4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*", "matchCriteriaId": "B70D4546-C25E-45DB-AA32-39F4D28E5E7B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "62EDB563-4C00-4000-AB2E-DD3C8A0C8E9B", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*", "matchCriteriaId": "334E3779-A716-4906-8655-40EBA0FB25D6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "63CD0614-C27D-4943-9E82-89C37F607683", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*", "matchCriteriaId": "D69F2F6D-D4A1-4202-A4D1-65CE5E2009AF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7E8FFA6-507F-48F1-9009-B93AB6D11728", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE8F0188-DC21-4E4C-A65D-BE396D2F985F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CB95B57-DBBB-4399-9F9D-F8C50B34F97F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "78D84DB1-06E6-4266-BCCE-66E994BC53EB", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C5E33FE-8FF2-41F2-A3C9-AD3371691EA1", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A6FD932E-3EEC-468C-9774-61B75EC7C214", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "28C55347-1C31-4243-9E52-D1CCAB566B46", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9E56C960-DB4A-44A1-A1D6-BB5A992EF5F4", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "488D2C9B-4804-46C0-A213-3E0DD1A825B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D723AA9D-4300-49C0-8F79-11D30A23B308", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "8EE99149-1D38-4F75-9E64-AEB83D510E5A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "64483A35-5AE7-42CD-AAE3-17C6C43D95A5", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "860DACEE-F948-46B0-B480-3DCBE7B4A04F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D4345B2-6885-4B20-BF1E-A24BA8D8D277", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "647765AD-9423-4145-A564-A93CA3A51EBA", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2A6E61F-12D7-4C2F-A2E2-3D2C3128BCC7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "46609A4A-0D56-4CF8-B95F-DCC14156A966", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E37171D8-A8BF-495B-BFF1-7A28028E4A89", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2526FF3A-8073-48D6-80B7-C745FE831B10", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1565F93E-BD2C-406A-A189-2F9CD87C701C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF4C8EFB-FA5C-4987-BD68-CB379AAD77A7", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F323311A-C361-4DFB-87ED-84A21290952F", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "15BB27F4-A1DB-45C7-9E0A-93FCC6680113", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E33115E-D9E9-46CB-8A4D-09AAA2D369BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCF73502-0D10-47D5-AE86-433B6F968EED", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "2364E018-8831-4890-84C7-5A21090632FE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "653AD79A-4049-4737-B7E9-F4E04EF5D5D3", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A49E0C3-5396-43D5-96D1-18CC21343692", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A8C9FFF-471D-4696-BAFF-B917A579888A", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "935B1F49-2CEF-4473-81EE-87363B6AC24A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "58DC892E-FFDC-4A02-83FE-C08B23F96B63", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CD30D7B-65C0-4A26-8596-BA2B48366EB2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFC869C2-0643-45C6-AF7B-63F5ECF8E2FD", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AA4F7E3-E9FB-4553-9C01-4B4FE747D4E6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D3964CC-B9AD-4FE6-8253-0A3E61111144", "versionEndIncluding": "03.07", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA06896B-5637-4B23-92D1-DE7BB3C46D9E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" }, { "lang": "es", "value": "Desbordamiento de b\u00fafer en el proceso de nombre de usuario de la libreta de direcciones en la autenticaci\u00f3n de la funci\u00f3n de dispositivo m\u00f3vil de impresoras multifunci\u00f3n de oficina e impresoras l\u00e1ser (*), lo que puede permitir que un atacante en el segmento de red haga que el producto afectado no responda o ejecute c\u00f3digo arbitrario.*: Satera LBP670C Firmware v03.07 de la serie/Satera MF750C y versiones anteriores vendidas en Jap\u00f3n. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 y anteriores vendidos en EE. UU. Firmware i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series v03.07 y anteriores vendidos en Europa." } ], "id": "CVE-2023-6232", "lastModified": "2024-11-21T08:43:25.170", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2024-02-06T01:15:08.740", "references": [ { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" } ], "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-787" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
cve-2023-6230
Vulnerability from cvelistv5
Published
2024-02-06 00:21
Modified
2024-08-02 08:21
Severity ?
EPSS score ?
Summary
Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Canon Inc. | Satera LBP670C Series |
Version: 03.07 and earlier |
||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T08:21:18.064Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Satera LBP670C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Satera MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS LBP674C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X LBP1333C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X MF1333C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS LBP673Cdw", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333P", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333i Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cp\u003eBuffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\u003c/p\u003e" } ], "value": "Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-787", "description": "CWE-787: Out-of-bounds Write", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-02-06T00:21:33.337Z", "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "assignerShortName": "Canon", "cveId": "CVE-2023-6230", "datePublished": "2024-02-06T00:21:33.337Z", "dateReserved": "2023-11-21T06:04:51.711Z", "dateUpdated": "2024-08-02T08:21:18.064Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-6232
Vulnerability from cvelistv5
Published
2024-02-06 00:22
Modified
2024-08-02 08:21
Severity ?
EPSS score ?
Summary
Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Canon Inc. | Satera LBP670C Series |
Version: 03.07 and earlier |
||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T08:21:17.927Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Satera LBP670C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Satera MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS LBP674C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X LBP1333C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X MF1333C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS LBP673Cdw", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333P", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333i Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cp\u003eBuffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\u003c/p\u003e" } ], "value": "Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-787", "description": "CWE-787: Out-of-bounds Write", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-02-06T00:22:31.201Z", "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "assignerShortName": "Canon", "cveId": "CVE-2023-6232", "datePublished": "2024-02-06T00:22:31.201Z", "dateReserved": "2023-11-21T06:05:05.768Z", "dateUpdated": "2024-08-02T08:21:17.927Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2022-24674
Vulnerability from cvelistv5
Published
2023-03-28 00:00
Modified
2025-02-19 15:37
Severity ?
EPSS score ?
Summary
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15834.
References
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
Canon | imageCLASS MF644Cdw |
Version: 10.02 |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T04:20:49.145Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-516/" }, { "tags": [ "x_transferred" ], "url": "https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/canon-laser-printer-and-small-office-multifunctional-printer-measure-against-buffer-overflow/" } ], "title": "CVE Program Container" }, { "metrics": [ { "other": { "content": { "id": "CVE-2022-24674", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2025-02-19T15:37:17.104491Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-02-19T15:37:21.554Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "imageCLASS MF644Cdw", "vendor": "Canon", "versions": [ { "status": "affected", "version": "10.02" } ] } ], "credits": [ { "lang": "en", "value": "Nicolas Devillers ( @nikaiw ), Jean-Romain Garnier and Raphael Rigo ( @_trou_ )" } ], "descriptions": [ { "lang": "en", "value": "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15834." } ], "metrics": [ { "cvssV3_0": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-121", "description": "CWE-121: Stack-based Buffer Overflow", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2023-03-28T00:00:00.000Z", "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi" }, "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-516/" }, { "url": "https://www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/canon-laser-printer-and-small-office-multifunctional-printer-measure-against-buffer-overflow/" } ] } }, "cveMetadata": { "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "assignerShortName": "zdi", "cveId": "CVE-2022-24674", "datePublished": "2023-03-28T00:00:00.000Z", "dateReserved": "2022-02-08T00:00:00.000Z", "dateUpdated": "2025-02-19T15:37:21.554Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2022-24673
Vulnerability from cvelistv5
Published
2023-03-28 00:00
Modified
2025-02-19 15:39
Severity ?
EPSS score ?
Summary
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15845.
References
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
Canon | imageCLASS MF644Cdw |
Version: 10.02 |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T04:20:49.148Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-515/" }, { "tags": [ "x_transferred" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/canon-laser-printer-inkjet-printer-and-small-office-multifunctional-printer-measure-against-buffer-overflow" } ], "title": "CVE Program Container" }, { "metrics": [ { "other": { "content": { "id": "CVE-2022-24673", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2025-02-19T15:39:46.782842Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-02-19T15:39:58.261Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "imageCLASS MF644Cdw", "vendor": "Canon", "versions": [ { "status": "affected", "version": "10.02" } ] } ], "credits": [ { "lang": "en", "value": "Angelboy (@scwuaptx) from DEVCORE Research Team" } ], "descriptions": [ { "lang": "en", "value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15845." } ], "metrics": [ { "cvssV3_0": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-121", "description": "CWE-121: Stack-based Buffer Overflow", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2023-03-28T00:00:00.000Z", "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi" }, "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-515/" }, { "url": "https://www.usa.canon.com/support/canon-product-advisories/canon-laser-printer-inkjet-printer-and-small-office-multifunctional-printer-measure-against-buffer-overflow" } ] } }, "cveMetadata": { "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "assignerShortName": "zdi", "cveId": "CVE-2022-24673", "datePublished": "2023-03-28T00:00:00.000Z", "dateReserved": "2022-02-08T00:00:00.000Z", "dateUpdated": "2025-02-19T15:39:58.261Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-6231
Vulnerability from cvelistv5
Published
2024-02-06 00:22
Modified
2024-08-02 08:21
Severity ?
EPSS score ?
Summary
Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Canon Inc. | Satera LBP670C Series |
Version: 03.07 and earlier |
||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T08:21:17.935Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Satera LBP670C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Satera MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS LBP674C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X LBP1333C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X MF1333C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS LBP673Cdw", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333P", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333i Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cp\u003eBuffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\u003c/p\u003e" } ], "value": "Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-787", "description": "CWE-787: Out-of-bounds Write", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-02-06T00:22:03.670Z", "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "assignerShortName": "Canon", "cveId": "CVE-2023-6231", "datePublished": "2024-02-06T00:22:03.670Z", "dateReserved": "2023-11-21T06:05:03.518Z", "dateUpdated": "2024-08-02T08:21:17.935Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-6234
Vulnerability from cvelistv5
Published
2024-02-06 00:23
Modified
2024-08-02 08:21
Severity ?
EPSS score ?
Summary
Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Canon Inc. | Satera LBP670C Series |
Version: 03.07 and earlier |
||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "affected": [ { "cpes": [ "cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "lbp674c", "vendor": "canon", "versions": [ { "lessThanOrEqual": "3.07", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "lbp1333c", "vendor": "canon", "versions": [ { "lessThanOrEqual": "3.07", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "i-sensys_x_c1333p", "vendor": "canon", "versions": [ { "lessThanOrEqual": "3.07", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "i-sensys_lbp673cdw", "vendor": "canon", "versions": [ { "lessThanOrEqual": "3.07", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "mf1333c", "vendor": "canon", "versions": [ { "lessThanOrEqual": "3.07", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:canon:mf750c:*:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "mf750c", "vendor": "canon", "versions": [ { "lessThanOrEqual": "3.07", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "metrics": [ { "other": { "content": { "id": "CVE-2023-6234", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2024-06-04T14:15:16.906621Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-06-04T17:16:57.552Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" }, { "providerMetadata": { "dateUpdated": "2024-08-02T08:21:17.875Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Satera LBP670C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Satera MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS LBP674C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X LBP1333C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X MF1333C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS LBP673Cdw", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333P", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333i Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cp\u003eBuffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\u003c/p\u003e" } ], "value": "Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-787", "description": "CWE-787: Out-of-bounds Write", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-02-06T00:23:28.727Z", "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "assignerShortName": "Canon", "cveId": "CVE-2023-6234", "datePublished": "2024-02-06T00:23:28.727Z", "dateReserved": "2023-11-21T06:05:11.045Z", "dateUpdated": "2024-08-02T08:21:17.875Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-6229
Vulnerability from cvelistv5
Published
2024-02-06 00:20
Modified
2024-08-02 08:21
Severity ?
EPSS score ?
Summary
Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Canon Inc. | Satera LBP670C Series |
Version: 03.07 and earlier |
||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T08:21:17.992Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Satera LBP670C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Satera MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS LBP674C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X LBP1333C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X MF1333C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS LBP673Cdw", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333P", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333i Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cp\u003eBuffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\u003c/p\u003e" } ], "value": "Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-787", "description": "CWE-787: Out-of-bounds Write", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-02-06T00:20:48.446Z", "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "assignerShortName": "Canon", "cveId": "CVE-2023-6229", "datePublished": "2024-02-06T00:20:48.446Z", "dateReserved": "2023-11-21T06:04:37.815Z", "dateUpdated": "2024-08-02T08:21:17.992Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-6233
Vulnerability from cvelistv5
Published
2024-02-06 00:23
Modified
2024-08-02 08:21
Severity ?
EPSS score ?
Summary
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References
Impacted products
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Canon Inc. | Satera LBP670C Series |
Version: 03.07 and earlier |
||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T08:21:18.092Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Satera LBP670C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Satera MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS LBP674C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X LBP1333C", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "Color imageCLASS X MF1333C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS LBP673Cdw", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333P", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "i-SENSYS MF750C Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] }, { "defaultStatus": "unaffected", "product": "C1333i Series", "vendor": "Canon Inc.", "versions": [ { "status": "affected", "version": "03.07 and earlier" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cp\u003eBuffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\u003c/p\u003e" } ], "value": "Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n" } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-787", "description": "CWE-787: Out-of-bounds Write", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-02-06T00:23:05.601Z", "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "shortName": "Canon" }, "references": [ { "tags": [ "vendor-advisory" ], "url": "https://psirt.canon/advisory-information/cp2024-001/" }, { "tags": [ "vendor-advisory" ], "url": "https://canon.jp/support/support-info/240205vulnerability-response" }, { "tags": [ "vendor-advisory" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers" }, { "tags": [ "vendor-advisory" ], "url": "https://www.canon-europe.com/support/product-security-latest-news/" } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "assignerShortName": "Canon", "cveId": "CVE-2023-6233", "datePublished": "2024-02-06T00:23:05.601Z", "dateReserved": "2023-11-21T06:05:08.309Z", "dateUpdated": "2024-08-02T08:21:18.092Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2022-24672
Vulnerability from cvelistv5
Published
2023-03-28 00:00
Modified
2025-02-19 15:41
Severity ?
EPSS score ?
Summary
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15802.
References
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
Canon | imageCLASS MF644Cdw |
Version: 10.02 |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T04:20:49.127Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-514/" }, { "tags": [ "x_transferred" ], "url": "https://www.usa.canon.com/support/canon-product-advisories/canon-laser-printer-inkjet-printer-and-small-office-multifunctio" } ], "title": "CVE Program Container" }, { "metrics": [ { "other": { "content": { "id": "CVE-2022-24672", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2025-02-19T15:40:11.420775Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-02-19T15:41:43.674Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "imageCLASS MF644Cdw", "vendor": "Canon", "versions": [ { "status": "affected", "version": "10.02" } ] } ], "credits": [ { "lang": "en", "value": "Mehdi Talbi (@abu_y0ussef), Remi Jullian (@netsecurity1), Thomas Jeunet (@cleptho), from @Synacktiv" } ], "descriptions": [ { "lang": "en", "value": "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15802." } ], "metrics": [ { "cvssV3_0": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-122", "description": "CWE-122: Heap-based Buffer Overflow", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2023-03-28T00:00:00.000Z", "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi" }, "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-514/" }, { "url": "https://www.usa.canon.com/support/canon-product-advisories/canon-laser-printer-inkjet-printer-and-small-office-multifunctio" } ] } }, "cveMetadata": { "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "assignerShortName": "zdi", "cveId": "CVE-2022-24672", "datePublished": "2023-03-28T00:00:00.000Z", "dateReserved": "2022-02-08T00:00:00.000Z", "dateUpdated": "2025-02-19T15:41:43.674Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }