Log in Start free

Vulnerability · Published Feb 6, 2024 · Assigned by Canon

CVE-2023-6234

Critical 9.8

In plain English

A critical-severity out-of-bounds write in C1333i Series from Canon Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.4%top 27.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

Affected products (as reported)

VendorProductVersions
Canon Inc. Satera LBP670C Series 03.07 and earlier
Canon Inc. Satera MF750C Series 03.07 and earlier
Canon Inc. Color imageCLASS LBP674C 03.07 and earlier
Canon Inc. Color imageCLASS X LBP1333C 03.07 and earlier
Canon Inc. Color imageCLASS MF750C Series 03.07 and earlier
Canon Inc. Color imageCLASS X MF1333C Series 03.07 and earlier
Canon Inc. i-SENSYS LBP673Cdw 03.07 and earlier
Canon Inc. C1333P 03.07 and earlier
Canon Inc. i-SENSYS MF750C Series 03.07 and earlier
Canon Inc. C1333i Series 03.07 and earlier

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References