PT-2024-14906 · Canon · Canon Imageclass Mf753Cdw+10

Published 2024-02-05 · Updated 2024-02-13 · CVE-2023-6233

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Satera LBP670C Series/Satera MF750C Series firmware versions 03.07 and earlier Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware versions 03.07 and earlier i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware versions 03.07 and earlier Canon imageCLASS MF753Cdw firmware versions prior to the fixed version

Description A buffer overflow in the SLP attribute request process of Office Multifunction Printers and Laser Printers may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. This issue affects devices sold in Japan, the US, and Europe. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Satera LBP670C Series/Satera MF750C Series firmware versions 03.07 and earlier, update to a version later than 03.07. For Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware versions 03.07 and earlier, update to a version later than 03.07. For i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware versions 03.07 and earlier, update to a version later than 03.07. For Canon imageCLASS MF753Cdw, update to a version that fixes the SLP service-url Stack-based Buffer Overflow Remote Code Execution Vulnerability. As a temporary workaround, consider restricting access to the SLP service-url to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-6233

ZDI-24-093

Affected Products

C1333P

C1333I Series

Canon Imageclass Mf753Cdw

Color Imageclass Lbp674C

Color Imageclass Mf750C Series

Color Imageclass X Lbp1333C

Color Imageclass X Mf1333C Series

Satera Lbp670C Series

Satera Mf750C Series

I-Sensys Lbp673Cdw

I-Sensys Mf750C Series

References · 11

• https://canon-europe.com/support/product-security-latest-news · Vendor Advisory
• https://psirt.canon/advisory-information/cp2024-001 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-24-093 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6233 · Security Note
• https://canon.jp/support/support-info/240205vulnerability-response · Vendor Advisory
• https://usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers · Vendor Advisory
• https://t.me/cvenotify/70213 · Telegram Post
• https://twitter.com/TheZDIBugs/status/1755246431974171134 · Twitter Post
• https://twitter.com/CVEnew/status/1754686012176191611 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1755140157768872104 · Twitter Post