PT-2026-3188 · Canon · Color Imageclass Mf650C Series+20

CVE-2025-14233 · Publicado 2026-01-15 · Atualizado 2026-03-23

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Canon Satera LBP670C Series/Satera MF750C Series firmware versions prior to v06.02 Canon Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware versions prior to v06.02 Canon i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware versions prior to v06.02

Description An invalid free issue exists in the CPCA file deletion processing of Small Office Multifunction Printers and Laser Printers. This could allow an attacker on the network segment to cause the product to become unresponsive or potentially execute arbitrary code.

Recommendations Update Canon Satera LBP670C Series/Satera MF750C Series firmware to version v06.02 or later. Update Canon Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware to version v06.02 or later. Update Canon i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware to version v06.02 or later.

Correção

Enumeração de Fraquezas

CWE-763

Identificadores relacionados

CVE-2025-14233

ZDI-26-222

Produtos afetados

1238P Ii

1238Pr Ii

1238I Ii

1238If Ii

Color Imageclass Lbp630C

Color Imageclass Mf650C Series

Satera Lbp670C Series

Satera Mf750C Series

I-Sensys Lbp230 Series

I-Sensys Lbp630C Series

I-Sensys Mf450 Series

I-Sensys Mf550 Series

I-Sensys Mf650C Series

Imageclass Lbp230 Series

Imageclass Mf450 Series

Imageclass X Lbp1238 Ii

Imageclass X Mf1238 Ii

Imageclass X Mf1643I Ii

Imageclass X Mf1643If Ii

Imagerunner 1643I Ii

Imagerunner 1643If Ii

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-14233 · Nota de Segurança
• https://twitter.com/CVEnew/status/2012126474438947312 · Publicação no Twitter
• https://canon.jp/support/support-info/260115vulnerability-response · Aviso do Fabricante
• https://t.me/cveNotify/149881 · Publicação no Telegram
• https://psirt.canon/advisory-information/cp2026-001 · Aviso do Fabricante
• https://usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Remediation-Measure-Against-Potential-Buffer-Overflow-Vulnerability-in-Laser-Printers-and-Small-Office-Multifunctional-Printers · Aviso do Fabricante
• https://canon-europe.com/support/product-security · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-14233 · Aviso do Fabricante
• https://twitter.com/TheHackerWire/status/2011976067289088154 · Publicação no Twitter
• https://zerodayinitiative.com/advisories/ZDI-26-222 · Nota de Segurança