Vulnerability-Lookup

CVE-2024-12647 (GCVE-0-2024-12647)

Vulnerability from cvelistv5 – Published: 2025-01-28 00:38 – Updated: 2025-01-28 15:17

Summary

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-28 14:55 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

Canon jpcert root

References

4 references

URL	Tags
https://psirt.canon/advisory-information/cp2025-001/	vendor-advisory
https://canon.jp/support/support-info/250127vulne…	vendor-advisory
https://www.usa.canon.com/support/canon-product-a…	vendor-advisory
https://www.canon-europe.com/support/product-secu…	vendor-advisory

Impacted products

13 products

Vendor	Product	Version	CPE status
Canon Inc.	Satera MF656Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	Satera MF654Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	Color imageCLASS MF656Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	Color imageCLASS MF654Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	Color imageCLASS MF653Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	Color imageCLASS MF652Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	Color imageCLASS LBP633Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	Color imageCLASS LBP632Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	i-SENSYS MF657Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	i-SENSYS MF655Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	i-SENSYS MF651Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	i-SENSYS LBP633Cdw	Affected: 05.04 and earlier	guessed
Canon Inc.	i-SENSYS LBP631Cdw	Affected: 05.04 and earlier	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-12647",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T14:55:53.062158Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-28T15:17:41.020Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Satera MF656Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Satera MF654Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF656Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF654Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF653Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF652Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP633Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP632Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF657Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF655Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF651Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP633Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP631Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eBuffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \u003c/p\u003e"
            }
          ],
          "value": "Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-28T00:38:17.973Z",
        "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "shortName": "Canon"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.canon/advisory-information/cp2025-001/"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://canon.jp/support/support-info/250127vulnerability-response"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.canon-europe.com/support/product-security/#news"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
    "assignerShortName": "Canon",
    "cveId": "CVE-2024-12647",
    "datePublished": "2025-01-28T00:38:17.973Z",
    "dateReserved": "2024-12-16T02:41:57.265Z",
    "dateUpdated": "2025-01-28T15:17:41.020Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-12647",
      "date": "2026-09-17",
      "epss": "0.01202",
      "percentile": "0.66712"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-12647\",\"sourceIdentifier\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"published\":\"2025-01-28T01:15:08.560\",\"lastModified\":\"2026-06-17T07:00:12.030\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de b\u00fafer en el procesamiento de descarga de fuentes CPCA de impresoras multifunci\u00f3n para peque\u00f1as oficinas e impresoras l\u00e1ser (*) que puede permitir que un atacante en el segmento de red provoque que el producto afectado deje de responder o ejecute c\u00f3digo arbitrario. *: Firmware v05.04 y anteriores de Satera MF656Cdw/Satera MF654Cdw vendido en Jap\u00f3n. Firmware v05.04 y anteriores de Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw vendido en EE. UU. Firmware v05.04 y anteriores de i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw vendidos en Europa.\"}],\"affected\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"affectedData\":[{\"vendor\":\"Canon Inc.\",\"product\":\"Satera MF656Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Satera MF654Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Color imageCLASS MF656Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Color imageCLASS MF654Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Color imageCLASS MF653Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Color imageCLASS MF652Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Color imageCLASS LBP633Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Color imageCLASS LBP632Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS MF657Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS MF655Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS MF651Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS LBP633Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS LBP631Cdw\",\"versions\":[{\"version\":\"05.04 and earlier\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-01-28T14:55:53.062158Z\",\"id\":\"CVE-2024-12647\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"57F593A2-44BE-4090-BBE6-953134D0D1E2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"376C5E10-0D6C-405D-BC63-BDE7257A8142\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"309D151A-B0A5-4B01-A54B-1C91BC45F170\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"020E1E4D-4055-446C-A403-544F50236262\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"E1D56787-194E-4E84-A321-500C114E6895\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C814016-6D9B-483D-9C29-95E4624C6CA4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"987055F8-7E20-4B8F-B1C4-7732E888B28A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"700050B9-DA11-4D63-A3DB-D6924DD7F3DF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf465dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"E0316629-B0C6-4477-8DE6-844F13EC28DF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf465dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB632D61-FFEE-4ED0-8F33-A8404919E4D6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf462dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"8CE9592C-EC74-4180-8B4A-A639F8AB5FC2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf462dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E4371D9-CC0B-431C-A04D-62B252ACD549\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf656cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"A808FD8C-2E1E-4050-BA9C-78CFD61E196B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf656cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4A3D591-82ED-42C4-B724-EDFA5E196066\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf654cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"2AA6EBC3-71A0-4467-B3EA-355425B0EF15\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf654cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"396973A5-0427-460C-A268-F44DE2E54C29\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf653cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"F3B935E6-C5C1-4BD3-B80D-4FABEDF3AB67\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf653cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31A2712C-6508-4DA4-B1EE-4A665063D9E8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf652cw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"1B128468-BB29-4E9D-B06E-744158D36D2C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf652cw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"976A3093-D510-4046-BB49-70187FBC8505\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"54BF39D0-5BB4-4F2E-B435-D74DEB24CD92\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1440_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"DFB65847-A3D0-48F8-8A18-653759F669CC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1440:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B544E39-2001-49BD-BC5A-3E21BCF50F8E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"9FC20747-28E3-4A25-9838-0D936C25D4FF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"264748B9-82FD-466C-894B-232305D930E4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"9BDB4157-4AC9-4A59-AC7C-CFA1B4D6D4A7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60EF8B7A-8184-469E-AB2B-C13C24E4F01C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"A5ADFB3E-D870-43D7-916F-E820E88B91B4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3406797E-EE0A-419B-862D-DBD8B505CCF6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"A018BC1D-1DF8-479B-91D8-820828B40447\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4077161-199F-44A0-AE33-BC999E06B8E6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp247dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"844474A9-3503-4A6B-8A0D-56E85EF021D1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp247dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"123F28F0-1509-42A8-A702-F6378E61375C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp246dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"5B7CD3E1-F2F8-4824-86E8-7693E7EED309\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp246dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B10A84C6-1C16-46BF-8056-C516BCD3A128\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp633cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"ED93AF90-6AAC-437C-B941-65B18A36F19A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp633cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E319965-0012-44F0-92A1-481BACA5C140\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp632cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"1ED64209-5508-42D7-BC33-7E1A4A753BCD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp632cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96F1019F-0C13-4FCD-B9C1-7B58D7080953\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"66A3432D-CD0D-4481-B73C-DCDFA073D4E5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp1440_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"2FA22DE5-D496-4ABE-B75D-6A8A84660B5F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp1440:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8494F2A5-E30B-4203-9325-A9DA158276D9\"}]}]}],\"references\":[{\"url\":\"https://canon.jp/support/support-info/250127vulnerability-response\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://psirt.canon/advisory-information/cp2025-001/\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.canon-europe.com/support/product-security/#news\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2025-05-28T20:38:16+00:00",
      "cve": "CVE-2024-12647",
      "id": "CVE-2024-12647",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-12647",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-12647.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-12647\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-01-28T14:55:53.062158Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-01-28T14:47:24.734Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Canon Inc.\", \"product\": \"Satera MF656Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Satera MF654Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF656Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF654Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF653Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF652Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS LBP633Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS LBP632Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS MF657Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS MF655Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS MF651Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS LBP633Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS LBP631Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}], \"references\": [{\"url\": \"https://psirt.canon/advisory-information/cp2025-001/\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://canon.jp/support/support-info/250127vulnerability-response\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.canon-europe.com/support/product-security/#news\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eBuffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787: Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"f98c90f0-e9bd-4fa7-911b-51993f3571fd\", \"shortName\": \"Canon\", \"dateUpdated\": \"2025-01-28T00:38:17.973Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-12647\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-01-28T15:17:41.020Z\", \"dateReserved\": \"2024-12-16T02:41:57.265Z\", \"assignerOrgId\": \"f98c90f0-e9bd-4fa7-911b-51993f3571fd\", \"datePublished\": \"2025-01-28T00:38:17.973Z\", \"assignerShortName\": \"Canon\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

FKIE_CVE-2024-12647

Vulnerability from fkie_nvd - Published: 2025-01-28 01:15 - Updated: 2026-06-17 07:00

Severity

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://canon.jp/support/support-info/250127vulnerability-response	Vendor Advisory
f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://psirt.canon/advisory-information/cp2025-001/	Vendor Advisory
f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.canon-europe.com/support/product-security/#news	Vendor Advisory
f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers	Vendor Advisory

Impacted products

Vendor	Product	Version
canon	mf455dw_firmware	*
canon	mf455dw	-
canon	mf453dw_firmware	*
canon	mf453dw	-
canon	mf452dw_firmware	*
canon	mf452dw	-
canon	mf451dw_firmware	*
canon	mf451dw	-
canon	mf465dw_firmware	*
canon	mf465dw	-
canon	mf462dw_firmware	*
canon	mf462dw	-
canon	mf656cdw_firmware	*
canon	mf656cdw	-
canon	mf654cdw_firmware	*
canon	mf654cdw	-
canon	mf653cdw_firmware	*
canon	mf653cdw	-
canon	mf652cw_firmware	*
canon	mf652cw	-
canon	mf1238_ii_firmware	*
canon	mf1238_ii	-
canon	mf1440_firmware	*
canon	mf1440	-
canon	mf1643if_ii_firmware	*
canon	mf1643if_ii	-
canon	mf1643i_ii_firmware	*
canon	mf1643i_ii	-
canon	lbp237dw_firmware	*
canon	lbp237dw	-
canon	lbp236dw_firmware	*
canon	lbp236dw	-
canon	lbp247dw_firmware	*
canon	lbp247dw	-
canon	lbp246dw_firmware	*
canon	lbp246dw	-
canon	lbp633cdw_firmware	*
canon	lbp633cdw	-
canon	lbp632cdw_firmware	*
canon	lbp632cdw	-
canon	lbp1238_ii_firmware	*
canon	lbp1238_ii	-
canon	lbp1440_firmware	*
canon	lbp1440	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Satera MF656Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Satera MF654Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF656Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF654Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF653Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF652Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP633Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP632Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF657Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF655Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF651Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP633Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP631Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        }
      ],
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "57F593A2-44BE-4090-BBE6-953134D0D1E2",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "309D151A-B0A5-4B01-A54B-1C91BC45F170",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1D56787-194E-4E84-A321-500C114E6895",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "987055F8-7E20-4B8F-B1C4-7732E888B28A",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf465dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0316629-B0C6-4477-8DE6-844F13EC28DF",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf465dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB632D61-FFEE-4ED0-8F33-A8404919E4D6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf462dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CE9592C-EC74-4180-8B4A-A639F8AB5FC2",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf462dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E4371D9-CC0B-431C-A04D-62B252ACD549",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf656cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A808FD8C-2E1E-4050-BA9C-78CFD61E196B",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf656cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4A3D591-82ED-42C4-B724-EDFA5E196066",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf654cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA6EBC3-71A0-4467-B3EA-355425B0EF15",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf654cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "396973A5-0427-460C-A268-F44DE2E54C29",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf653cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3B935E6-C5C1-4BD3-B80D-4FABEDF3AB67",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf653cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "31A2712C-6508-4DA4-B1EE-4A665063D9E8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf652cw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B128468-BB29-4E9D-B06E-744158D36D2C",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf652cw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "976A3093-D510-4046-BB49-70187FBC8505",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "54BF39D0-5BB4-4F2E-B435-D74DEB24CD92",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf1440_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFB65847-A3D0-48F8-8A18-653759F669CC",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf1440:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B544E39-2001-49BD-BC5A-3E21BCF50F8E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FC20747-28E3-4A25-9838-0D936C25D4FF",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BDB4157-4AC9-4A59-AC7C-CFA1B4D6D4A7",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5ADFB3E-D870-43D7-916F-E820E88B91B4",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A018BC1D-1DF8-479B-91D8-820828B40447",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp247dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "844474A9-3503-4A6B-8A0D-56E85EF021D1",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp247dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "123F28F0-1509-42A8-A702-F6378E61375C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp246dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B7CD3E1-F2F8-4824-86E8-7693E7EED309",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp246dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B10A84C6-1C16-46BF-8056-C516BCD3A128",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp633cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED93AF90-6AAC-437C-B941-65B18A36F19A",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp633cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E319965-0012-44F0-92A1-481BACA5C140",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp632cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1ED64209-5508-42D7-BC33-7E1A4A753BCD",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp632cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "96F1019F-0C13-4FCD-B9C1-7B58D7080953",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "66A3432D-CD0D-4481-B73C-DCDFA073D4E5",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp1440_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FA22DE5-D496-4ABE-B75D-6A8A84660B5F",
              "versionEndIncluding": "05.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp1440:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8494F2A5-E30B-4203-9325-A9DA158276D9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer en el procesamiento de descarga de fuentes CPCA de impresoras multifunci\u00f3n para peque\u00f1as oficinas e impresoras l\u00e1ser (*) que puede permitir que un atacante en el segmento de red provoque que el producto afectado deje de responder o ejecute c\u00f3digo arbitrario. *: Firmware v05.04 y anteriores de Satera MF656Cdw/Satera MF654Cdw vendido en Jap\u00f3n. Firmware v05.04 y anteriores de Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw vendido en EE. UU. Firmware v05.04 y anteriores de i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw vendidos en Europa."
    }
  ],
  "id": "CVE-2024-12647",
  "lastModified": "2026-06-17T07:00:12.030",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-12647",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-01-28T14:55:53.062158Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-01-28T01:15:08.560",
  "references": [
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://canon.jp/support/support-info/250127vulnerability-response"
    },
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://psirt.canon/advisory-information/cp2025-001/"
    },
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.canon-europe.com/support/product-security/#news"
    },
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers"
    }
  ],
  "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "type": "Secondary"
    }
  ]
}

GHSA-P8VF-P5G9-F6J7

Vulnerability from github – Published: 2025-01-28 03:31 – Updated: 2025-01-28 03:31

Details

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Severity

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-12647"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-01-28T01:15:08Z",
    "severity": "CRITICAL"
  },
  "details": "Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.",
  "id": "GHSA-p8vf-p5g9-f6j7",
  "modified": "2025-01-28T03:31:13Z",
  "published": "2025-01-28T03:31:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12647"
    },
    {
      "type": "WEB",
      "url": "https://canon.jp/support/support-info/250127vulnerability-response"
    },
    {
      "type": "WEB",
      "url": "https://psirt.canon/advisory-information/cp2025-001"
    },
    {
      "type": "WEB",
      "url": "https://www.canon-europe.com/support/product-security/#news"
    },
    {
      "type": "WEB",
      "url": "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

JVNDB-2025-001238

Vulnerability from jvndb - Published: 2025-01-29 04:41 - Updated:2025-05-27 07:06

Severity

9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers

Details

Office/Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple out-of-bounds write vulnerabilities (CWE-787, CVE-2024-12647, CVE-2024-12648, CVE-2024-12649, CVE-2025-2146). Canon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.

References

Type

URL

	JVN	https://jvn.jp/en/vu/JVNVU93455283/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-12647
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-12648
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-12649
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-2146
	Out-of-bounds Write(CWE-787)	https://cwe.mitre.org/data/definitions/787.html

Impacted products

Vendor

Product

Canon Inc.

(multiple product)

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001238.html",
  "dc:date": "2025-05-27T16:06+09:00",
  "dcterms:issued": "2025-01-29T13:41+09:00",
  "dcterms:modified": "2025-05-27T16:06+09:00",
  "description": "Office/Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple out-of-bounds write vulnerabilities (CWE-787, CVE-2024-12647, CVE-2024-12648, CVE-2024-12649, CVE-2025-2146).\r\n\r\nCanon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001238.html",
  "sec:cpe": {
    "#text": "cpe:/a:canon:multiple_product",
    "@product": "(multiple product)",
    "@vendor": "Canon Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "9.8",
    "@severity": "Critical",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2025-001238",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU93455283/index.html",
      "@id": "JVNVU#93455283",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-12647",
      "@id": "CVE-2024-12647",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-12648",
      "@id": "CVE-2024-12648",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-12649",
      "@id": "CVE-2024-12649",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-2146",
      "@id": "CVE-2025-2146",
      "@source": "CVE"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/787.html",
      "@id": "CWE-787",
      "@title": "Out-of-bounds Write(CWE-787)"
    }
  ],
  "title": "Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-12647 (GCVE-0-2024-12647)

FKIE_CVE-2024-12647

GHSA-P8VF-P5G9-F6J7

JVNDB-2025-001238

Tags

Sightings

Nomenclature

Related by attack behaviour