PT-2023-7443 · Canon · Color Imageclass Lbp660C Series+17

Published 2023-05-04 · Updated 2023-09-12 · CVE-2023-0852

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Canon imageCLASS, imageCLASS MF, imageCLASS LBP, imagePROGRAF, PIXMA, MAXIFY versions prior to firmware Ver.11.04 Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier

Description The issue is related to a buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers, which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. This can be exploited remotely.

Recommendations For Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, update to firmware Ver.11.05 or later. For Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C, update to firmware Ver.11.05 or later. For i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i, update to firmware Ver.11.05 or later. As a temporary workaround, consider disabling the Address Book of Mobile Device function until a patch is available. Restrict access to the network segment to minimize the risk of exploitation.

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2023-08482

CVE-2023-0852

ZDI-23-552

ZDI-23-711

Affected Products

C1127P

C1127If

Canon Imageclass

Color Imageclass Lbp620C Series

Color Imageclass Lbp660C Series

Color Imageclass Mf640C Series

Color Imageclass Mf740C Series

Maxify

Pixma

X Lbp1127C

X Mf1127C

I-Sensys Lbp620C Series

I-Sensys Lbp660C Series

I-Sensys Mf640C Series

I-Sensys Mf740C Series

Imageclass Lbp

Imageclass Mf

Imageprograf

References · 12

• https://osv.dev/vulnerability/CVE-2023-0852 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0852 · Security Note
• https://bdu.fstec.ru/vul/2023-08482 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-552 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-711 · Security Note
• https://psirt.canon/advisory-information/cp2023-001 · Note
• https://canon.jp/support/support-info/230414vulnerability-response · Note
• https://canon-europe.com/support/product-security-latest-news · Note
• https://t.me/cibsecurity/63882 · Telegram Post
• https://t.me/cvenotify/50834 · Telegram Post
• https://usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow · Note
• https://vuldb.com/?id.228086 · Note