Improper access control in Canon U.S.A. products - CVE-2023-0858

Vulnerability identifier: #VU76478

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-0858

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote attacker can bypass implemented security restrictions and gain unauthorized access to the product.

imageCLASS MF743CDW
MAXIFY GX4020
MAXIFY GX3020
PIXMA G4270
PIXMA G3270
imagePROGRAF TC-20M
imagePROGRAF TC-20
imageCLASS LBP664CDW
imageCLASS LBP623CDW
imageCLASS LBP622CDW
imageCLASS LBP1127C
imageCLASS LBP122DW
imageCLASS MF746CDW
imageCLASS MF745CDW
imageCLASS MF1127C
imageCLASS MF741CDW
imageCLASS MF644CDW
imageCLASS MF642CDW
imageCLASS MF641CW
imageCLASS MF275DW
imageCLASS MF273DW
imageCLASS MF272DW
imageCLASS MF269DW VP II
imageCLASS MF269DW II
imageCLASS MF267DW II
imageCLASS MF264DW II
imageCLASS MF262DW II
i-SENSYS LBP621Cw
i-SENSYS LBP623Cdw
i-SENSYS LBP633Cdw
i-SENSYS LBP664Cx
i-SENSYS MF641Cw
i-SENSYS MF643CDW
i-SENSYS MF645Cx
i-SENSYS MF742CDW
i-SENSYS MF744CDW
i-SENSYS MF746Cx
i-SENSYS X C1127i
i-SENSYS C1127iF
i-SENSYS X C1127P

Install updates from vendor's website.

• https://jvn.jp/en/vu/JVNVU94777298/index.html
• https://psirt.canon/advisory-information/cp2023-001/
• https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediatio...

• Multiple vulnerabilities in Canon USA Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers
• Multiple vulnerabilities in Canon Europe Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers