Alex Rubin

**Name of the Vulnerable Software and Affected Versions** Satera LBP660C Series versions 11.04 and earlier Satera LBP620C Series versions 11.04 and earlier Satera MF740C Series versions 11.04 and earlier Satera MF640C Series versions 11.04 and earlier Color imageCLASS LBP660C Series versions 11.04 and earlier Color imageCLASS LBP620C Series versions 11.04 and earlier Color imageCLASS X LBP1127C versions 11.04 and earlier Color imageCLASS MF740C Series versions 11.04 and earlier Color imageCLASS MF640C Series versions 11.04 and earlier Color imageCLASS X MF1127C versions 11.04 and earlier i-SENSYS LBP660C Series versions 11.04 and earlier i-SENSYS LBP620C Series versions 11.04 and earlier i-SENSYS MF740C Series versions 11.04 and earlier i-SENSYS MF640C Series versions 11.04 and earlier i-SENSYS C1127P versions 11.04 and earlier i-SENSYS C1127iF versions 11.04 and earlier i-SENSYS C1127i versions 11.04 and earlier **Description** The issue is related to an unintentional change of settings during the initial registration of system administrators, which uses control protocols. This may allow an attacker on the network segment to trigger unauthorized access to the product. **Recommendations** For Satera LBP660C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Satera LBP620C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Satera MF740C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Satera MF640C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS LBP660C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS LBP620C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS X LBP1127C version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS MF740C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS MF640C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS X MF1127C version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS LBP660C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS LBP620C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS MF740C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS MF640C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS C1127P version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS C1127iF version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS C1127i version 11.04 and earlier, update the firmware to a version later than 11.04.

**Name of the Vulnerable Software and Affected Versions** Canon Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series versions 11.04 and earlier Canon Color imageCLASS LBP660C Series/LBP620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C versions 11.04 and earlier Canon i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series/C1127P/C1127iF/C1127i versions 11.04 and earlier **Description** The issue is related to improper authentication of the RemoteUI in certain Canon office and small office multifunction printers and laser printers. This may allow an attacker on the network segment to trigger unauthorized access to the product. **Recommendations** For Canon Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series versions 11.04 and earlier, update the firmware to a version later than 11.04. For Canon Color imageCLASS LBP660C Series/LBP620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C versions 11.04 and earlier, update the firmware to a version later than 11.04. For Canon i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series/C1127P/C1127iF/C1127i versions 11.04 and earlier, update the firmware to a version later than 11.04. As a temporary workaround, consider restricting access to the RemoteUI until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series versions 11.04 and earlier Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C versions 11.04 and earlier i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i versions 11.04 and earlier **Description** The issue allows arbitrary files to be installed in the Setting Data Import function of Office and Small Office Multifunction Printers and Laser Printers. **Recommendations** For Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series versions 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C versions 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i versions 11.04 and earlier, update the firmware to a version later than 11.04.

**Name of the Vulnerable Software and Affected Versions** MySQL Server versions 5.7.41 and prior MySQL Server versions 8.0.32 and prior **Description** A difficult to exploit vulnerability in the MySQL Server product of Oracle MySQL allows a low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and can result in takeover of MySQL Server. **Recommendations** For MySQL Server versions 5.7.41 and prior, update to a version later than 5.7.41. For MySQL Server versions 8.0.32 and prior, update to a version later than 8.0.32. As a temporary workaround, consider restricting network access to the MySQL Server until a patch is available. Restrict access to the Client programs component to minimize the risk of exploitation.