Integer overflow in Canon U.S.A. products - CVE-2022-43974

Vulnerability identifier: #VU76473

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-43974

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow. A remote attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

imageCLASS MF743CDW
MAXIFY GX4020
MAXIFY GX3020
PIXMA G4270
PIXMA G3270
imagePROGRAF TC-20M
imagePROGRAF TC-20
imageCLASS LBP664CDW
imageCLASS LBP623CDW
imageCLASS LBP622CDW
imageCLASS LBP1127C
imageCLASS LBP122DW
imageCLASS MF746CDW
imageCLASS MF745CDW
imageCLASS MF1127C
imageCLASS MF741CDW
imageCLASS MF644CDW
imageCLASS MF642CDW
imageCLASS MF641CW
imageCLASS MF275DW
imageCLASS MF273DW
imageCLASS MF272DW
imageCLASS MF269DW VP II
imageCLASS MF269DW II
imageCLASS MF267DW II
imageCLASS MF264DW II
imageCLASS MF262DW II
MAXIFY GX3040
MAXIFY GX3050
MAXIFY GX4040
MAXIFY GX4050
PIXMA G3430
PIXMA G3470 BK
PIXMA G3470 RED
PIXMA G3470 WH
PIXMA G3570
PIXMA G3571
PIXMA G3572PIXMA G4470
PIXMA G4570

Install updates from vendor's website.

• https://jvn.jp/en/vu/JVNVU94777298/index.html
• https://psirt.canon/advisory-information/cp2023-001/
• https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediatio...

• Multiple vulnerabilities in Canon USA Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers
• Multiple vulnerabilities in Canon Europe Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers