CVE-2024-12647criticalCWE-787

CVE-2024-12647: falha crítica em Canon Inc. Satera MF656Cdw

Publicada em

Seguir esta CVE+ Monitorar Color imageCLASS LBP632Cdw+ Monitorar Color imageCLASS LBP633Cdw

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.2%
Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Canon Inc. · Color imageCLASS LBP632CdwCanon Inc. · Color imageCLASS LBP633CdwCanon Inc. · Color imageCLASS MF652CdwCanon Inc. · Color imageCLASS MF653CdwCanon Inc. · Color imageCLASS MF654CdwCanon Inc. · Color imageCLASS MF656CdwCanon Inc. · i-SENSYS LBP631CdwCanon Inc. · i-SENSYS LBP633CdwCanon Inc. · i-SENSYS MF651CdwCanon Inc. · i-SENSYS MF655CdwCanon Inc. · i-SENSYS MF657CdwCanon Inc. · Satera MF654CdwCanon Inc. · Satera MF656Cdw
CVEs relacionadas — Canon Inc. Satera MF656Cdw

No mesmo produto, das mais perigosas para as menos.

CVE-2024-12649CRITICALCVE-2024-12649EPSS 1.2%CVE-2024-12648CRITICALCVE-2024-12648EPSS 1.2%CVE-2025-2146CRITICALCVE-2025-2146EPSS 0.9%