CVE-2023-6234

CRITICAL EPSS 68.7%
Published Feb 6, 20242y ago · Modified Jun 17, 20262w ago
9.8 CVSS 3.1
Critical
Find Similar
Published Feb 6, 2024 2y ago
Last Modified Jun 17, 2026 2w ago

Description

Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

CVSS Details

Base Score
9.8
Exploitability
3.9
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
68.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 58

VendorProductVersionRange
canonmf755cdw_firmware* ≤03.07
canonmf755cdw*any
canonmf753cdw_firmware* ≤03.07
canonmf753cdw*any
canonmf751cdw_firmware* ≤03.07
canonmf751cdw*any
canonlbp674c_firmware* ≤03.07
canonlbp674c*any
canonlbp672c_firmware* ≤03.07
canonlbp672c*any
canonlbp671c_firmware* ≤03.07
canonlbp671c*any
canonmf1238_ii_firmware* ≤03.07
canonmf1238_ii*any
canonmf1333c_firmware* ≤03.07
canonmf1333c*any
canonmf1643i_ii_firmware* ≤03.07
canonmf1643i_ii*any
canonmf1643if_ii_firmware* ≤03.07
canonmf1643if_ii*any
canonmf275dw_firmware* ≤03.07
canonmf275dw*any
canonmf273dw_firmware* ≤03.07
canonmf273dw*any
canonmf272dw_firmware* ≤03.07
canonmf272dw*any
canonmf455dw_firmware* ≤03.07
canonmf455dw*any
canonmf453dw_firmware* ≤03.07
canonmf453dw*any
canonmf452dw_firmware* ≤03.07
canonmf452dw*any
canonmf451dw_firmware* ≤03.07
canonmf451dw*any
canonlbp122dw_firmware* ≤03.07
canonlbp122dw*any
canonlbp1238_ii_firmware* ≤03.07
canonlbp1238_ii*any
canonlbp1333c_firmware* ≤03.07
canonlbp1333c*any
canonlbp237dw_firmware* ≤03.07
canonlbp237dw*any
canonlbp236dw_firmware* ≤03.07
canonlbp236dw*any
canonlbp674cdw_firmware* ≤03.07
canonlbp674cdw*any
canoni-sensys_mf754cdw_firmware* ≤03.07
canoni-sensys_mf754cdw*any
canoni-sensys_x_c1333if_firmware* ≤03.07
canoni-sensys_x_c1333if*any
canoni-sensys_lbp673cdw_firmware* ≤03.07
canoni-sensys_lbp673cdw*any
canoni-sensys_mf752cdw_firmware* ≤03.07
canoni-sensys_mf752cdw*any
canoni-sensys_x_c1333i_firmware* ≤03.07
canoni-sensys_x_c1333i*any
canoni-sensys_x_c1333p_firmware* ≤03.07
canoni-sensys_x_c1333p*any

References 4

  • canon.jp https://canon.jp/support/support-info/240205vulnerability-response
    Vendor Advisory
  • psirt.canon https://psirt.canon/advisory-information/cp2024-001/
    Vendor Advisory
  • canon-europe.com https://www.canon-europe.com/support/product-security-latest-news/
    Vendor Advisory
  • usa.canon.com https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.