by Kastro
Paper/Archive/CVE-2024-2184

CVE-2024-2184

Canon Inc. Color imageCLASS MF740C Series — Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may a…

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 57.1.571 × 2011.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF740C Series/Satera MF640C Series/Satera LBP660C Series/Satera LBP620C Series firmware v12.07 and earlier, and Satera MF750C Series/Satera LBP670C Series firmware v03.09 and earlier sold in Japan.Color imageCLASS MF740C Series/Color imageCLASS MF640C Series/Color imageCLASS X MF1127C/Color imageCLASS LBP664Cdw/Color imageCLASS LBP622Cdw/Color imageCLASS X LBP1127C firmware v12.07 and earlier, and Color imageCLASS MF750C Series/Color imageCLASS X MF1333C/Color imageCLASS LBP674Cdw/Color imageCLASS X LBP1333C firmware v03.09 and earlier sold in US.i-SENSYS MF740C Series/i-SENSYS MF640C Series/C1127i Series/i-SENSYS LBP660C Series/i-SENSYS LBP620C Series/C1127P firmware v12.07 and earlier, and i-SENSYS MF750C Series/C1333i Series/i-SENSYS LBP673Cdw/C1333P firmware v03.09 and earlier sold in Europe.

Affected

ProductAffectedFixed inSource
Color imageCLASS MF740C Seriesv12.07 and earlier–CNA
Color imageCLASS MF640C Seriesv12.07 and earlier–CNA
i-SENSYS MF740C Seriesv12.07 and earlier–CNA
i-SENSYS MF640C Seriesv12.07 and earlier–CNA
Satera MF740C Seriesv12.07 and earlier–CNA
Satera MF640C Seriesv12.07 and earlier–CNA
Color imageCLASS X MF1127Cv12.07 and earlier–CNA
C1127i Seriesv12.07 and earlier–CNA
Color imageCLASS LBP664Cdwv12.07 and earlier–CNA
Color imageCLASS LBP622Cdwv12.07 and earlier–CNA
i-SENSYS LBP660C Seriesv12.07 and earlier–CNA
i-SENSYS LBP620C Seriesv12.07 and earlier–CNA

Scores by source

Canon (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorypsirt.canon/advisory-information/cp2024-002