Vulnerability Details : CVE-2023-6229
Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
Vulnerability category: OverflowMemory CorruptionExecute code
Products affected by CVE-2023-6229
- cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-6229
0.26%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 65 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-6229
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
Canon Inc. | 2024-02-06 |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST | 2024-02-13 |
CWE ids for CVE-2023-6229
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by:
- f98c90f0-e9bd-4fa7-911b-51993f3571fd (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2023-6229
-
https://psirt.canon/advisory-information/cp2024-001/
CP2024-001 Vulnerabilities Mitigation/Remediation for Small Office Multifunction Printers and Laser Printers - Canon PSIRTVendor Advisory
-
https://www.canon-europe.com/support/product-security-latest-news/
Canon Product Security - Canon EuropeVendor Advisory
-
https://canon.jp/support/support-info/240205vulnerability-response
レーザービームプリンターおよびスモールオフィス向け複合機に関する脆弱性対応について｜サポート｜キヤノンVendor Advisory
-
https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers
Service Notice: Regarding Vulnerability Measure Against Buffer Overflow for Laser Printers and Small Office Multifunctional Printers | Canon U.S.A., Inc.Vendor Advisory
Jump to