PT-2023-16566 · Canon · Mf640C Series+13

Alex Rubin

+1

·

Published

2023-05-11

·

Updated

2023-05-30

·

CVE-2023-0859

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series versions 11.04 and earlier Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C versions 11.04 and earlier i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i versions 11.04 and earlier
Description The issue allows arbitrary files to be installed in the Setting Data Import function of Office and Small Office Multifunction Printers and Laser Printers.
Recommendations For Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series versions 11.04 and earlier, update the firmware to a version later than 11.04. For Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C versions 11.04 and earlier, update the firmware to a version later than 11.04. For i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i versions 11.04 and earlier, update the firmware to a version later than 11.04.

Fix

Weakness Enumeration

CWE-1285

Related Identifiers

CVE-2023-0859

Affected Products

C1127P
C1127If
Color Imageclass Lbp620C Series
Color Imageclass Lbp660C Series
Lbp620C Series
Mf640C Series
Mf740C Series
Satera Lbp660C Series
X Lbp1127C
X Mf1127C
I-Sensys Lbp620C Series
I-Sensys Lbp660C Series
I-Sensys Mf640C Series
I-Sensys Mf740C Series