CVE-2023-0852
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
Affected (45)
Products: Canon: Mf642cdw Firmware, Mf644cdw Firmware, Mf741cdw Firmware, Mf743cdw Firmware, Mf745cdw Firmware, Lbp621c Firmware, Lbp622c Firmware, Lbp661c Firmware, Lbp662c Firmware, Lbp664c Firmware, Mf1127c Firmware, Mf262dw Ii Firmware, Mf264dw Ii Firmware, Mf267dw Ii Firmware, Mf269dw Ii Firmware, Mf269dw Vp Ii Firmware, Mf272dw Firmware, Mf273dw Firmware, Mf275dw Firmware, Mf641cw Firmware, Mf746cdw Firmware, Lbp122dw Firmware, Lbp1127c Firmware, Lbp622cdw Firmware, Lbp623cdw Firmware, Lbp664cdw Firmware, Imageprograf Tc 20 Firmware, Imageprograf Tc 20m Firmware, Pixma G3270 Firmware, Pixma G4270 Firmware, Maxify Gx3020 Firmware, Maxify Gx4020 Firmware, I Sensys Lbp621cw Firmware, I Sensys Lbp623cdw Firmware, I Sensys Lbp633cdw Firmware, I Sensys Lbp664cx Firmware, I Sensys Mf641cw Firmware, I Sensys Mf643cdw Firmware, I Sensys Mf645cx Firmware, I Sensys Mf742cdw Firmware, I Sensys Mf744cdw Firmware, I Sensys Mf746cx Firmware, I Sensys X C1127i Firmware, I Sensys X C1127if Firmware, I Sensys X C1127p Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf642cdw | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf644cdw | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf741cdw | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf743cdw | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf745cdw | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp621c | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp622c | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp661c | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp662c | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp664c | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf1127c | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf262dw Ii | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf264dw Ii | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf267dw Ii | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf269dw Ii | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf269dw Vp Ii | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf272dw | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf273dw | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf275dw | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf641cw | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Mf746cdw | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp122dw | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp1127c | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp622cdw | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp623cdw | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Lbp664cdw | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Imageprograf Tc 20 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Imageprograf Tc 20m | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Pixma G3270 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Pixma G4270 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Maxify Gx3020 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon Maxify Gx4020 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Lbp621cw | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Lbp623cdw | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Lbp633cdw | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Lbp664cx | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Mf641cw | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Mf643cdw | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Mf645cx | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Mf742cdw | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Mf744cdw | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys Mf746cx | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys X C1127i | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys X C1127if | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 11.04 |
| Running on/with | Platform Versions |
|---|---|
Canon I Sensys X C1127p | All versions |
Related CWEs
CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
References (8)
Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.