by Kastro
Paper/Archive/CVE-2025-14236

CVE-2025-14236

Canon Inc. Satera LBP670C Series — Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the net…

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.8.598 × 2012.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.

Affected

ProductAffectedFixed inSource
Satera LBP670C Series06.02 and earlier–CNA
Satera MF750C Series06.02 and earlier–CNA
Color imageCLASS LBP630C06.02 and earlier–CNA
Color imageCLASS MF650C Series06.02 and earlier–CNA
imageCLASS LBP230 Series06.02 and earlier–CNA
imageCLASS X LBP1238 II06.02 and earlier–CNA
imageCLASS MF450 Series06.02 and earlier–CNA
imageCLASS X MF1238 II06.02 and earlier–CNA
imageCLASS X MF1643i II06.02 and earlier–CNA
imageCLASS X MF1643iF II06.02 and earlier–CNA
i-SENSYS LBP630C Series06.02 and earlier–CNA
i-SENSYS MF650C Series06.02 and earlier–CNA

Scores by source

Canon (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Canon (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorypsirt.canon/advisory-information/cp2026-001advisorycanon.jp/support/support-info/260115vulnerability-responseadvisoryusa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Remediation-Measure-Against-Potential-Buffer-Overflow-Vulnerability-in-Laser-Printers-and-Small-Office-Multifunctional-Printersadvisorycanon-europe.com/support/product-security