Incorrect User Management in Canon U.S.A. products - CVE-2023-0857

Vulnerability identifier: #VU76476

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-0857

CWE-ID: CWE-286

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to incorrect user management. A remote attacker can change the product's settings or gain unauthorized access to the product.

imageCLASS MF743CDW
MAXIFY GX4020
MAXIFY GX3020
PIXMA G4270
PIXMA G3270
imagePROGRAF TC-20M
imagePROGRAF TC-20
imageCLASS LBP664CDW
imageCLASS LBP623CDW
imageCLASS LBP622CDW
imageCLASS LBP1127C
imageCLASS LBP122DW
imageCLASS MF746CDW
imageCLASS MF745CDW
imageCLASS MF1127C
imageCLASS MF741CDW
imageCLASS MF644CDW
imageCLASS MF642CDW
imageCLASS MF641CW
imageCLASS MF275DW
imageCLASS MF273DW
imageCLASS MF272DW
imageCLASS MF269DW VP II
imageCLASS MF269DW II
imageCLASS MF267DW II
imageCLASS MF264DW II
imageCLASS MF262DW II
i-SENSYS LBP621Cw
i-SENSYS LBP623Cdw
i-SENSYS LBP633Cdw
i-SENSYS LBP664Cx
i-SENSYS MF641Cw
i-SENSYS MF643CDW
i-SENSYS MF645Cx
i-SENSYS MF742CDW
i-SENSYS MF744CDW
i-SENSYS MF746Cx
i-SENSYS X C1127i
i-SENSYS C1127iF
i-SENSYS X C1127P

Install updates from vendor's website.

• https://jvn.jp/en/vu/JVNVU94777298/index.html
• https://psirt.canon/advisory-information/cp2023-001/
• https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediatio...

• Multiple vulnerabilities in Canon USA Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers
• Multiple vulnerabilities in Canon Europe Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers