PT-2025-1925 · Canon · I-Sensys Mf651Cdw+12

Neodyme · Published 2025-01-28 · Updated 2026-01-26 · CVE-2024-12648

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Color imageCLASS MF656Cdw versions 05.04 and earlier Color imageCLASS MF654Cdw versions 05.04 and earlier Color imageCLASS MF653Cdw versions 05.04 and earlier Color imageCLASS MF652Cdw versions 05.04 and earlier Color imageCLASS LBP633Cdw versions 05.04 and earlier Color imageCLASS LBP632Cdw versions 05.04 and earlier i-SENSYS MF657Cdw versions 05.04 and earlier i-SENSYS MF655Cdw versions 05.04 and earlier i-SENSYS MF651Cdw versions 05.04 and earlier i-SENSYS LBP633Cdw versions 05.04 and earlier i-SENSYS LBP631Cdw versions 05.04 and earlier Satera MF656Cdw versions 05.04 and earlier Satera MF654Cdw versions 05.04 and earlier

Description The issue is related to a buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers, which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.

Recommendations Color imageCLASS MF656Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. Color imageCLASS MF654Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. Color imageCLASS MF653Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. Color imageCLASS MF652Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. Color imageCLASS LBP633Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. Color imageCLASS LBP632Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. i-SENSYS MF657Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. i-SENSYS MF655Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. i-SENSYS MF651Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. i-SENSYS LBP633Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. i-SENSYS LBP631Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. Satera MF656Cdw version 05.04 and earlier: Update firmware to a version later than 05.04. Satera MF654Cdw version 05.04 and earlier: Update firmware to a version later than 05.04.

Fix

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2024-12648

ZDI-25-074

Affected Products

Color Imageclass Lbp632Cdw

Color Imageclass Lbp633Cdw

Color Imageclass Mf652Cdw

Color Imageclass Mf653Cdw

Color Imageclass Mf654Cdw

Color Imageclass Mf656Cdw

Satera Mf654Cdw

Satera Mf656Cdw

I-Sensys Lbp631Cdw

I-Sensys Lbp633Cdw

I-Sensys Mf651Cdw

I-Sensys Mf655Cdw

I-Sensys Mf657Cdw

References · 18

• https://psirt.canon/advisory-information/cp2025-001 · Vendor Advisory
• https://usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers · Vendor Advisory
• https://canon-europe.com/support/product-security/#news · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-074 · Security Note
• https://osv.dev/vulnerability/CVE-2024-12648 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-12648 · Security Note
• https://canon.jp/support/support-info/250127vulnerability-response · Vendor Advisory
• https://twitter.com/CveFindCom/status/1884044392488415251 · Twitter Post
• https://twitter.com/fletch_ai/status/1885191436481815031 · Twitter Post
• https://twitter.com/autumn_good_35/status/1884816650589110597 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1884797092314624073 · Twitter Post
• https://t.me/cvedetector/16567 · Telegram Post
• https://twitter.com/TheZDIBugs/status/1886527740502815213 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1884169851352101124 · Twitter Post
• https://twitter.com/CVEnew/status/1884183332445118802 · Twitter Post