CVE-2023-0859

LOW

Office / Small Office Multifunction Printers and Laser Printers <11...

Title source: llm

Description

Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

References (4)

[Various Sources] https://canon.jp/support/support-info/230414vulnerability-response

[Various Sources] https://psirt.canon/advisory-information/cp2023-001/

[Various Sources] https://www.canon-europe.com/support/product-security-latest-news/

[Various Sources] https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow

Scores

CVSS v3 2.2

EPSS 0.0008

EPSS Percentile 22.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1285

Status published

Products (45)

canon/i-sensys_lbp621cw_firmware < 11.04

canon/i-sensys_lbp623cdw_firmware < 11.04

canon/i-sensys_lbp633cdw_firmware < 11.04

canon/i-sensys_lbp664cx_firmware < 11.04

canon/i-sensys_mf641cw_firmware < 11.04

canon/i-sensys_mf643cdw_firmware < 11.04

canon/i-sensys_mf645cx_firmware < 11.04

canon/i-sensys_mf742cdw_firmware < 11.04

canon/i-sensys_mf744cdw_firmware < 11.04

canon/i-sensys_mf746cx_firmware < 11.04

... and 35 more

Published May 11, 2023

Tracked Since Feb 18, 2026