CVE-2024-0244

CRITICAL

Canon i-SENSYS MF754Cdw and related models < 03.07 - Out-of-bounds Write via CPCA PCFAX Number Process

Title source: llm

Description

Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS MF750C Series/Color imageCLASS X MF1333C firmware v03.07 and earlier sold in US. i-SENSYS MF754Cdw/C1333iF firmware v03.07 and earlier sold in Europe.

References (4)

Core 4

Core References

Vendor Advisory vendor-advisory

https://psirt.canon/advisory-information/cp2024-001/

Vendor Advisory vendor-advisory

https://canon.jp/support/support-info/240205vulnerability-response

Vendor Advisory vendor-advisory

https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers

Vendor Advisory vendor-advisory

https://www.canon-europe.com/support/product-security-latest-news/

Scores

CVSS v3 9.8

EPSS 0.0138

EPSS Percentile 68.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-787

Status published

Products (7)

canon/i-sensys_mf754cdw_firmware < 03.07

canon/i-sensys_x_c1333if_firmware < 03.07

canon/lbp1333c_firmware < 03.07

canon/mf1333c_firmware < 03.07

canon/mf751cdw_firmware < 03.07

canon/mf753cdw_firmware < 03.07

canon/mf755cdw_firmware < 03.07

Published Feb 06, 2024

Tracked Since Feb 18, 2026