Stack-based buffer overflow in Canon U.S.A. products - CVE-2023-0856

Vulnerability identifier: #VU76472

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-0856

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

imageCLASS MF743CDW
MAXIFY GX4020
MAXIFY GX3020
PIXMA G4270
PIXMA G3270
imagePROGRAF TC-20M
imagePROGRAF TC-20
imageCLASS LBP664CDW
imageCLASS LBP623CDW
imageCLASS LBP622CDW
imageCLASS LBP1127C
imageCLASS LBP122DW
imageCLASS MF746CDW
imageCLASS MF745CDW
imageCLASS MF1127C
imageCLASS MF741CDW
imageCLASS MF644CDW
imageCLASS MF642CDW
imageCLASS MF641CW
imageCLASS MF275DW
imageCLASS MF273DW
imageCLASS MF272DW
imageCLASS MF269DW VP II
imageCLASS MF269DW II
imageCLASS MF267DW II
imageCLASS MF264DW II
imageCLASS MF262DW II
i-SENSYS LBP621Cw
i-SENSYS LBP623Cdw
i-SENSYS LBP633Cdw
i-SENSYS LBP664Cx
i-SENSYS MF641Cw
i-SENSYS MF643CDW
i-SENSYS MF645Cx
i-SENSYS MF742CDW
i-SENSYS MF744CDW
i-SENSYS MF746Cx
i-SENSYS X C1127i
i-SENSYS C1127iF
i-SENSYS X C1127P

Install updates from vendor's website.

• https://jvn.jp/en/vu/JVNVU94777298/index.html
• https://psirt.canon/advisory-information/cp2023-001/
• https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediatio...

• Multiple vulnerabilities in Canon USA Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers
• Multiple vulnerabilities in Canon Europe Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers