Vulnerability Details CVE-2023-6230
Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.1%
CVSS Severity
CVSS v3 Score 9.8
References
- https://canon.jp/support/support-info/240205vulnerability-response
- https://psirt.canon/advisory-information/cp2024-001/
- https://www.canon-europe.com/support/product-security-latest-news/
- https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers
- https://canon.jp/support/support-info/240205vulnerability-response
- https://psirt.canon/advisory-information/cp2024-001/
- https://www.canon-europe.com/support/product-security-latest-news/
- https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers
Products affected by CVE-2023-6230
-
cpe:2.3:h:canon:i-sensys_lbp673cdw:-
-
cpe:2.3:h:canon:i-sensys_mf752cdw:-
-
cpe:2.3:h:canon:i-sensys_mf754cdw:-
-
cpe:2.3:h:canon:i-sensys_x_c1333i:-
-
cpe:2.3:h:canon:i-sensys_x_c1333if:-
-
cpe:2.3:h:canon:i-sensys_x_c1333p:-
-
cpe:2.3:h:canon:lbp122dw:-
-
cpe:2.3:h:canon:lbp1238_ii:-
-
cpe:2.3:h:canon:lbp1333c:-
-
cpe:2.3:h:canon:lbp236dw:-
-
cpe:2.3:h:canon:lbp237dw:-
-
cpe:2.3:h:canon:lbp671c:-
-
cpe:2.3:h:canon:lbp672c:-
-
cpe:2.3:h:canon:lbp674c:-
-
cpe:2.3:h:canon:lbp674cdw:-
-
cpe:2.3:h:canon:mf1238_ii:-
-
cpe:2.3:h:canon:mf1333c:-
-
cpe:2.3:h:canon:mf1643i_ii:-
-
cpe:2.3:h:canon:mf1643if_ii:-
-
cpe:2.3:h:canon:mf272dw:-
-
cpe:2.3:h:canon:mf273dw:-
-
cpe:2.3:h:canon:mf275dw:-
-
cpe:2.3:h:canon:mf451dw:-
-
cpe:2.3:h:canon:mf452dw:-
-
cpe:2.3:h:canon:mf453dw:-
-
cpe:2.3:h:canon:mf455dw:-
-
cpe:2.3:h:canon:mf751cdw:-
-
cpe:2.3:h:canon:mf753cdw:-
-
cpe:2.3:h:canon:mf755cdw:-
-
cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*
-
cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*
-
cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*
-
cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*
-
cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*
-
cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*
-
cpe:2.3:o:canon:lbp122dw_firmware:-
-
cpe:2.3:o:canon:lbp1238_ii_firmware:-
-
cpe:2.3:o:canon:lbp1333c_firmware:*
-
cpe:2.3:o:canon:lbp236dw_firmware:-
-
cpe:2.3:o:canon:lbp237dw_firmware:-
-
cpe:2.3:o:canon:lbp671c_firmware:*
-
cpe:2.3:o:canon:lbp672c_firmware:*
-
cpe:2.3:o:canon:lbp674c_firmware:*
-
cpe:2.3:o:canon:lbp674cdw_firmware:*
-
cpe:2.3:o:canon:mf1238_ii_firmware:-
-
cpe:2.3:o:canon:mf1333c_firmware:*
-
cpe:2.3:o:canon:mf1643i_ii_firmware:-
-
cpe:2.3:o:canon:mf1643if_ii_firmware:-
-
cpe:2.3:o:canon:mf272dw_firmware:-
-
cpe:2.3:o:canon:mf273dw_firmware:-
-
cpe:2.3:o:canon:mf275dw_firmware:-
-
cpe:2.3:o:canon:mf451dw_firmware:-
-
cpe:2.3:o:canon:mf452dw_firmware:-
-
cpe:2.3:o:canon:mf453dw_firmware:-
-
cpe:2.3:o:canon:mf455dw_firmware:-
-
cpe:2.3:o:canon:mf751cdw_firmware:*
-
cpe:2.3:o:canon:mf753cdw_firmware:*
-
cpe:2.3:o:canon:mf755cdw_firmware:*