PT-2024-1699 · Canon · Canon Imageclass Mf750C Series+4

Connor Ford · Published 2024-02-05 · Updated 2024-02-13 · CVE-2024-0244

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Canon imageCLASS MF753Cdw version 03.07 and earlier Canon imageCLASS MF750C Series version 03.07 and earlier Color imageCLASS X MF1333C version 03.07 and earlier i-SENSYS MF754Cdw version 03.07 and earlier i-SENSYS MF754Cdw/C1333iF version 03.07 and earlier Satera MF750C Series version 03.07 and earlier

Description The issue is related to a buffer overflow in the CPCA PCFAX number process of Office Multifunction Printers and Laser Printers, which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. The exploitation of this issue can be done remotely without requiring authentication.

Recommendations For Canon imageCLASS MF753Cdw version 03.07 and earlier, update the firmware to a version later than 03.07. For Canon imageCLASS MF750C Series version 03.07 and earlier, update the firmware to a version later than 03.07. For Color imageCLASS X MF1333C version 03.07 and earlier, update the firmware to a version later than 03.07. For i-SENSYS MF754Cdw version 03.07 and earlier, update the firmware to a version later than 03.07. For i-SENSYS MF754Cdw/C1333iF version 03.07 and earlier, update the firmware to a version later than 03.07. For Satera MF750C Series version 03.07 and earlier, update the firmware to a version later than 03.07.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-01387

CVE-2024-0244

ZDI-24-095

Affected Products

Canon Imageclass Mf750C Series

Canon Imageclass Mf753Cdw

Color Imageclass X Mf1333C

I-Sensys Mf754Cdw

I-Sensys Mf754Cdw/C1333If

References · 14

• https://bdu.fstec.ru/vul/2024-01387 · Security Note
• https://canon.jp/support/support-info/240205vulnerability-response · Vendor Advisory
• https://canon-europe.com/support/product-security-latest-news · Vendor Advisory
• https://psirt.canon/advisory-information/cp2024-001 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-0244 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-24-095 · Security Note
• https://usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0244 · Security Note
• https://twitter.com/catnap707/status/1754711004280467690 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1754707365549806035 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1755246434448761096 · Twitter Post
• https://twitter.com/CVEnew/status/1754686010053865716 · Twitter Post
• https://t.me/cvenotify/70215 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1755140663581008042 · Twitter Post