Description
Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
References (4)
Core 4
Core References
Vendor Advisory vendor-advisory
https://psirt.canon/advisory-information/cp2024-001/
Vendor Advisory vendor-advisory
https://canon.jp/support/support-info/240205vulnerability-response
Vendor Advisory vendor-advisory
https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers
Vendor Advisory vendor-advisory
https://www.canon-europe.com/support/product-security-latest-news/
Scores
CVSS v3
9.8
EPSS
0.0146
EPSS Percentile
70.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-787
Status
published
Products (29)
canon/i-sensys_lbp673cdw_firmware
< 03.07
canon/i-sensys_mf752cdw_firmware
< 03.07
canon/i-sensys_mf754cdw_firmware
< 03.07
canon/i-sensys_x_c1333i_firmware
< 03.07
canon/i-sensys_x_c1333if_firmware
< 03.07
canon/i-sensys_x_c1333p_firmware
< 03.07
canon/lbp122dw_firmware
< 03.07
canon/lbp1238_ii_firmware
< 03.07
canon/lbp1333c_firmware
< 03.07
canon/lbp236dw_firmware
< 03.07
... and 19 more
Published
Feb 06, 2024
Tracked Since
Feb 18, 2026