Log in Start free

Vulnerability · Published Feb 6, 2024 · Assigned by Canon

CVE-2024-0244

Critical 9.8

In plain English

A critical-severity out-of-bounds write in C1333iF from Canon Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 77% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.6%top 23.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS MF750C Series/Color imageCLASS X MF1333C firmware v03.07 and earlier sold in US. i-SENSYS MF754Cdw/C1333iF firmware v03.07 and earlier sold in Europe.

Affected products (as reported)

VendorProductVersions
Canon Inc. Satera MF750C Series 03.07 and earlier
Canon Inc. Color imageCLASS MF750C Series 03.07 and earlier
Canon Inc. Color imageCLASS X MF1333C 03.07 and earlier
Canon Inc. i-SENSYS MF754Cdw 03.07 and earlier
Canon Inc. C1333iF 03.07 and earlier

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References