Lucene search

F98c90f0-e9bd-4fa7-911b-51993f3571fdCVE-2023-6230

HistoryFeb 06, 2024 - 1:15 a.m.

CVE-2023-6230

2024-02-0601:15:08

CWE-787

f98c90f0-e9bd-4fa7-911b-51993f3571fd

web.nvd.nist.gov

cve-2023-6230

buffer overflow

address book

authentication

multifunction printers

laser printers

office

security vulnerability

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

JSON

Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

Affected configurations

NVD

Node

canonmf755cdw_firmwareRange≤03.07

AND

canonmf755cdwMatch-

Node

canonmf753cdw_firmwareRange≤03.07

AND

canonmf753cdwMatch-

Node

canonmf751cdw_firmwareRange≤03.07

AND

canonmf751cdwMatch-

Node

canonlbp674c_firmwareRange≤03.07

AND

canonlbp674cMatch-

Node

canonlbp672c_firmwareRange≤03.07

AND

canonlbp672cMatch-

Node

canonlbp671c_firmwareRange≤03.07

AND

canonlbp671cMatch-

Node

canonmf1238_ii_firmwareRange≤03.07

AND

canonmf1238_iiMatch-

Node

canonmf1333c_firmwareRange≤03.07

AND

canonmf1333cMatch-

Node

canonmf1643i_ii_firmwareRange≤03.07

AND

canonmf1643i_iiMatch-

Node

canonmf1643if_ii_firmwareRange≤03.07

AND

canonmf1643if_iiMatch-

Node

canonmf275dw_firmwareRange≤03.07

AND

canonmf275dwMatch-

Node

canonmf273dw_firmwareRange≤03.07

AND

canonmf273dwMatch-

Node

canonmf272dw_firmwareRange≤03.07

AND

canonmf272dwMatch-

Node

canonmf455dw_firmwareRange≤03.07

AND

canonmf455dwMatch-

Node

canonmf453dw_firmwareRange≤03.07

AND

canonmf453dwMatch-

Node

canonmf452dw_firmwareRange≤03.07

AND

canonmf452dwMatch-

Node

canonmf451dw_firmwareRange≤03.07

AND

canonmf451dwMatch-

Node

canonlbp122dw_firmwareRange≤03.07

AND

canonlbp122dwMatch-

Node

canonlbp1238_ii_firmwareRange≤03.07

AND

canonlbp1238_iiMatch-

Node

canonlbp1333c_firmwareRange≤03.07

AND

canonlbp1333cMatch-

Node

canonlbp237dw_firmwareRange≤03.07

AND

canonlbp237dwMatch-

Node

canonlbp236dw_firmwareRange≤03.07

AND

canonlbp236dwMatch-

Node

canonlbp674cdw_firmwareRange≤03.07

AND

canonlbp674cdwMatch-

Node

canoni-sensys_mf754cdw_firmwareRange≤03.07

AND

canoni-sensys_mf754cdwMatch-

Node

canoni-sensys_x_c1333if_firmwareRange≤03.07

AND

canoni-sensys_x_c1333ifMatch-

Node

canoni-sensys_lbp673cdw_firmwareRange≤03.07

AND

canoni-sensys_lbp673cdwMatch-

Node

canoni-sensys_mf752cdw_firmwareRange≤03.07

AND

canoni-sensys_mf752cdwMatch-

Node

canoni-sensys_x_c1333i_firmwareRange≤03.07

AND

canoni-sensys_x_c1333iMatch-

Node

canoni-sensys_x_c1333p_firmwareRange≤03.07

AND

canoni-sensys_x_c1333pMatch-

CPENameOperatorVersion
canon:mf755cdw_firmwarecanon mf755cdw firmwarele03.07

CPE	Name	Operator	Version
canon:mf755cdw_firmware	canon mf755cdw firmware	le	03.07

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Satera LBP670C Series",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Satera MF750C Series",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Color imageCLASS LBP674C",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Color imageCLASS X LBP1333C",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Color imageCLASS MF750C Series",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Color imageCLASS X MF1333C Series",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "i-SENSYS LBP673Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "C1333P",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "i-SENSYS MF750C Series",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "C1333i Series",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "03.07 and earlier"
      }
    ]
  }
]

References

canon.jp/support/support-info/240205vulnerability-response

psirt.canon/advisory-information/cp2024-001/

www.canon-europe.com/support/product-security-latest-news/

www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

JSON

Related for CVE-2023-6230