PT-2023-16564 · Canon · Color Imageclass X Mf1127C+14

Alex Rubin

+1

·

Published

2023-05-11

·

Updated

2023-05-30

·

CVE-2023-0857

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Satera LBP660C Series versions 11.04 and earlier Satera LBP620C Series versions 11.04 and earlier Satera MF740C Series versions 11.04 and earlier Satera MF640C Series versions 11.04 and earlier Color imageCLASS LBP660C Series versions 11.04 and earlier Color imageCLASS LBP620C Series versions 11.04 and earlier Color imageCLASS X LBP1127C versions 11.04 and earlier Color imageCLASS MF740C Series versions 11.04 and earlier Color imageCLASS MF640C Series versions 11.04 and earlier Color imageCLASS X MF1127C versions 11.04 and earlier i-SENSYS LBP660C Series versions 11.04 and earlier i-SENSYS LBP620C Series versions 11.04 and earlier i-SENSYS MF740C Series versions 11.04 and earlier i-SENSYS MF640C Series versions 11.04 and earlier i-SENSYS C1127P versions 11.04 and earlier i-SENSYS C1127iF versions 11.04 and earlier i-SENSYS C1127i versions 11.04 and earlier
Description The issue is related to an unintentional change of settings during the initial registration of system administrators, which uses control protocols. This may allow an attacker on the network segment to trigger unauthorized access to the product.
Recommendations For Satera LBP660C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Satera LBP620C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Satera MF740C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Satera MF640C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS LBP660C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS LBP620C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS X LBP1127C version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS MF740C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS MF640C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS X MF1127C version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS LBP660C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS LBP620C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS MF740C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS MF640C Series version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS C1127P version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS C1127iF version 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS C1127i version 11.04 and earlier, update the firmware to a version later than 11.04.

Fix

Weakness Enumeration

CWE-286

Related Identifiers

CVE-2023-0857

Affected Products

Color Imageclass Lbp620C Series
Color Imageclass Lbp660C Series
Color Imageclass Mf640C Series
Color Imageclass Mf740C Series
Color Imageclass X Lbp1127C
Color Imageclass X Mf1127C
Satera Lbp620C Series
Satera Lbp660C Series
Satera Mf640C Series
Satera Mf740C Series
I-Sensys C1127I
I-Sensys Lbp620C Series
I-Sensys Lbp660C Series
I-Sensys Mf640C Series
I-Sensys Mf740C Series