CVE-2023-6230: falha crítica em Canon Inc. Satera LBP670C Series
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.5%
Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Canon Inc. · C1333i SeriesCanon Inc. · C1333PCanon Inc. · Color imageCLASS LBP674CCanon Inc. · Color imageCLASS MF750C SeriesCanon Inc. · Color imageCLASS X LBP1333CCanon Inc. · Color imageCLASS X MF1333C SeriesCanon Inc. · i-SENSYS LBP673CdwCanon Inc. · i-SENSYS MF750C SeriesCanon Inc. · Satera LBP670C SeriesCanon Inc. · Satera MF750C SeriesCVEs relacionadas — Canon Inc. Satera LBP670C Series
No mesmo produto, das mais perigosas para as menos.
Referências
https://canon.jp/support/support-info/240205vulnerability-responsehttps://psirt.canon/advisory-information/cp2024-001/https://www.canon-europe.com/support/product-security-latest-news/https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers