cvelistv5 - cve-2024-12647

cve-2024-12647

Vulnerability from cvelistv5

Published

2025-01-28 00:38

Modified

2025-01-28 15:17

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS score ?

0.13% (0.28579)

Summary

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

References

▼	URL	Tags
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://canon.jp/support/support-info/250127vulnerability-response
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://psirt.canon/advisory-information/cp2025-001/
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.canon-europe.com/support/product-security/#news
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers

Impacted products

Vendor

Product

Version

▼

Canon Inc.

Satera MF656Cdw

Version: 05.04 and earlier

Canon Inc.	Satera MF654Cdw	Version: 05.04 and earlier
Canon Inc.	Color imageCLASS MF656Cdw	Version: 05.04 and earlier
Canon Inc.	Color imageCLASS MF654Cdw	Version: 05.04 and earlier
Canon Inc.	Color imageCLASS MF653Cdw	Version: 05.04 and earlier
Canon Inc.	Color imageCLASS MF652Cdw	Version: 05.04 and earlier
Canon Inc.	Color imageCLASS LBP633Cdw	Version: 05.04 and earlier
Canon Inc.	Color imageCLASS LBP632Cdw	Version: 05.04 and earlier
Canon Inc.	i-SENSYS MF657Cdw	Version: 05.04 and earlier
Canon Inc.	i-SENSYS MF655Cdw	Version: 05.04 and earlier
Canon Inc.	i-SENSYS MF651Cdw	Version: 05.04 and earlier
Canon Inc.	i-SENSYS LBP633Cdw	Version: 05.04 and earlier
Canon Inc.	i-SENSYS LBP631Cdw	Version: 05.04 and earlier

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-12647",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-28T14:55:53.062158Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-28T15:17:41.020Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Satera MF656Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "Satera MF654Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "Color imageCLASS MF656Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "Color imageCLASS MF654Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "Color imageCLASS MF653Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "Color imageCLASS MF652Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "Color imageCLASS LBP633Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "Color imageCLASS LBP632Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "i-SENSYS MF657Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "i-SENSYS MF655Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "i-SENSYS MF651Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "i-SENSYS LBP633Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
            {
               product: "i-SENSYS LBP631Cdw",
               vendor: "Canon Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "05.04 and earlier",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. </p>",
                  },
               ],
               value: "Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-787",
                     description: "CWE-787: Out-of-bounds Write",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-28T00:38:17.973Z",
            orgId: "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
            shortName: "Canon",
         },
         references: [
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://psirt.canon/advisory-information/cp2025-001/",
            },
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://canon.jp/support/support-info/250127vulnerability-response",
            },
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers",
            },
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.canon-europe.com/support/product-security/#news",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      assignerShortName: "Canon",
      cveId: "CVE-2024-12647",
      datePublished: "2025-01-28T00:38:17.973Z",
      dateReserved: "2024-12-16T02:41:57.265Z",
      dateUpdated: "2025-01-28T15:17:41.020Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-12647\",\"sourceIdentifier\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"published\":\"2025-01-28T01:15:08.560\",\"lastModified\":\"2025-01-28T01:15:08.560\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"references\":[{\"url\":\"https://canon.jp/support/support-info/250127vulnerability-response\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\"},{\"url\":\"https://psirt.canon/advisory-information/cp2025-001/\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\"},{\"url\":\"https://www.canon-europe.com/support/product-security/#news\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\"},{\"url\":\"https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\"}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-12647\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-01-28T14:55:53.062158Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-01-28T14:47:24.734Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Canon Inc.\", \"product\": \"Satera MF656Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Satera MF654Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF656Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF654Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF653Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF652Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS LBP633Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS LBP632Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS MF657Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS MF655Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS MF651Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS LBP633Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS LBP631Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}], \"references\": [{\"url\": \"https://psirt.canon/advisory-information/cp2025-001/\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://canon.jp/support/support-info/250127vulnerability-response\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.canon-europe.com/support/product-security/#news\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"<p>Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. </p>\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787: Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"f98c90f0-e9bd-4fa7-911b-51993f3571fd\", \"shortName\": \"Canon\", \"dateUpdated\": \"2025-01-28T00:38:17.973Z\"}}}",
         cveMetadata: "{\"cveId\": \"CVE-2024-12647\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-01-28T15:17:41.020Z\", \"dateReserved\": \"2024-12-16T02:41:57.265Z\", \"assignerOrgId\": \"f98c90f0-e9bd-4fa7-911b-51993f3571fd\", \"datePublished\": \"2025-01-28T00:38:17.973Z\", \"assignerShortName\": \"Canon\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}

ghsa-p8vf-p5g9-f6j7

Vulnerability from github

Published

2025-01-28 03:31

Modified

2025-01-28 03:31

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-12647",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-787",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2025-01-28T01:15:08Z",
      severity: "CRITICAL",
   },
   details: "Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.",
   id: "GHSA-p8vf-p5g9-f6j7",
   modified: "2025-01-28T03:31:13Z",
   published: "2025-01-28T03:31:13Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-12647",
      },
      {
         type: "WEB",
         url: "https://canon.jp/support/support-info/250127vulnerability-response",
      },
      {
         type: "WEB",
         url: "https://psirt.canon/advisory-information/cp2025-001",
      },
      {
         type: "WEB",
         url: "https://www.canon-europe.com/support/product-security/#news",
      },
      {
         type: "WEB",
         url: "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
         type: "CVSS_V3",
      },
   ],
}

fkie_cve-2024-12647

Vulnerability from fkie_nvd

Published

2025-01-28 01:15

Modified

2025-01-28 01:15

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

▼	URL	Tags
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://canon.jp/support/support-info/250127vulnerability-response
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://psirt.canon/advisory-information/cp2025-001/
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.canon-europe.com/support/product-security/#news
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.",
      },
      {
         lang: "es",
         value: "Desbordamiento de búfer en el procesamiento de descarga de fuentes CPCA de impresoras multifunción para pequeñas oficinas e impresoras láser (*) que puede permitir que un atacante en el segmento de red provoque que el producto afectado deje de responder o ejecute código arbitrario. *: Firmware v05.04 y anteriores de Satera MF656Cdw/Satera MF654Cdw vendido en Japón. Firmware v05.04 y anteriores de Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw vendido en EE. UU. Firmware v05.04 y anteriores de i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw vendidos en Europa.",
      },
   ],
   id: "CVE-2024-12647",
   lastModified: "2025-01-28T01:15:08.560",
   metrics: {
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 9.8,
               baseSeverity: "CRITICAL",
               confidentialityImpact: "HIGH",
               integrityImpact: "HIGH",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
               version: "3.1",
            },
            exploitabilityScore: 3.9,
            impactScore: 5.9,
            source: "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
            type: "Secondary",
         },
      ],
   },
   published: "2025-01-28T01:15:08.560",
   references: [
      {
         source: "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
         url: "https://canon.jp/support/support-info/250127vulnerability-response",
      },
      {
         source: "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
         url: "https://psirt.canon/advisory-information/cp2025-001/",
      },
      {
         source: "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
         url: "https://www.canon-europe.com/support/product-security/#news",
      },
      {
         source: "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
         url: "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers",
      },
   ],
   sourceIdentifier: "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
   vulnStatus: "Awaiting Analysis",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-787",
            },
         ],
         source: "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
         type: "Secondary",
      },
   ],
}

cve-2024-12647

Vulnerability from jvndb

Published

2025-01-29 13:41

Modified

2025-01-29 13:41

Severity ?

9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers

Details

Office/Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple out-of-bounds write vulnerabilities (CWE-787, CVE-2024-12647, CVE-2024-12648, CVE-2024-12649). Canon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.

References

▼	Type	URL
	JVN	https://jvn.jp/en/vu/JVNVU93455283/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-12647
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-12648
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-12649
	Out-of-bounds Write(CWE-787)	https://cwe.mitre.org/data/definitions/787.html

Impacted products

▼	Vendor	Product
	Canon	(multiple product)

Show details on JVN DB website

JSON

To clipboard

{
   "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001238.html",
   "dc:date": "2025-01-29T13:41+09:00",
   "dcterms:issued": "2025-01-29T13:41+09:00",
   "dcterms:modified": "2025-01-29T13:41+09:00",
   description: "Office/Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple out-of-bounds write vulnerabilities (CWE-787, CVE-2024-12647, CVE-2024-12648, CVE-2024-12649).\r\n\r\nCanon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.",
   link: "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001238.html",
   "sec:cpe": {
      "#text": "cpe:/a:canon:multiple_product",
      "@product": "(multiple product)",
      "@vendor": "Canon",
      "@version": "2.2",
   },
   "sec:cvss": {
      "@score": "9.8",
      "@severity": "Critical",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "@version": "3.0",
   },
   "sec:identifier": "JVNDB-2025-001238",
   "sec:references": [
      {
         "#text": "https://jvn.jp/en/vu/JVNVU93455283/index.html",
         "@id": "JVNVU#93455283",
         "@source": "JVN",
      },
      {
         "#text": "https://www.cve.org/CVERecord?id=CVE-2024-12647",
         "@id": "CVE-2024-12647",
         "@source": "CVE",
      },
      {
         "#text": "https://www.cve.org/CVERecord?id=CVE-2024-12648",
         "@id": "CVE-2024-12648",
         "@source": "CVE",
      },
      {
         "#text": "https://www.cve.org/CVERecord?id=CVE-2024-12649",
         "@id": "CVE-2024-12649",
         "@source": "CVE",
      },
      {
         "#text": "https://cwe.mitre.org/data/definitions/787.html",
         "@id": "CWE-787",
         "@title": "Out-of-bounds Write(CWE-787)",
      },
   ],
   title: "Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

cve-2024-12647

Vulnerability from cvelistv5

ghsa-p8vf-p5g9-f6j7

Vulnerability from github

fkie_cve-2024-12647

Vulnerability from fkie_nvd

cve-2024-12647

Vulnerability from jvndb

Tags

Sightings

Nomenclature