Lucene search

K
zdiYingMuo (@YingMuo), working with DEVCORE Internship Program.ZDI-24-562
HistoryMay 31, 2024 - 12:00 a.m.

Canon imageCLASS MF753Cdw setResource Buffer Overflow Remote Code Execution Vulnerability

2024-05-3100:00:00
YingMuo (@YingMuo), working with DEVCORE Internship Program.
www.zerodayinitiative.com
3
canon imageclass mf753cdw
buffer overflow
remote code execution
authentication bypass
cadm service

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF753Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the device.

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%