PT-2024-14907 · Canon · Canon Imageclass Mf753Cdw+8

Published 2024-02-05 · Updated 2024-05-31 · CVE-2023-6234

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Canon imageCLASS MF753Cdw firmware version 03.07 and earlier Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier

Description A buffer overflow vulnerability exists in the CPCA Color LUT Resource Download process of Canon Office Multifunction Printers and Laser Printers. This issue may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. The vulnerability can be exploited by network-adjacent attackers without requiring authentication.

Recommendations For Canon imageCLASS MF753Cdw firmware version 03.07 and earlier, update to a newer version that contains a fix for this issue. For Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier, update to a newer version that contains a fix for this issue. For Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier, update to a newer version that contains a fix for this issue. For i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier, update to a newer version that contains a fix for this issue. As a temporary workaround, consider disabling the setResource function until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-6234

ZDI-24-094

ZDI-24-562

Affected Products

C1333P

C1333I Series

Canon Imageclass Mf753Cdw

Color Imageclass Lbp674C

Color Imageclass Mf750C Series

Color Imageclass X Lbp1333C

Color Imageclass X Mf1333C Series

I-Sensys Lbp673Cdw

I-Sensys Mf750C Series

References · 14

• https://usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-24-094 · Security Note
• https://canon-europe.com/support/product-security-latest-news · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-24-562 · Security Note
• https://psirt.canon/advisory-information/cp2024-001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6234 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6234 · Vendor Advisory
• https://canon.jp/support/support-info/240205vulnerability-response · Vendor Advisory
• https://twitter.com/CVEnew/status/1754686011198820587 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1755246433265946687 · Twitter Post
• https://t.me/cvenotify/70214 · Telegram Post
• https://twitter.com/catnap707/status/1754711004280467690 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1755139651713585566 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1754707365549806035 · Twitter Post