Heap-based buffer overflow in Canon Office/Small Office Multifunction Printers and Laser…
Priority MEDIUM 51CWE-122Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-122 and the CVSS impact.
Summary
Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01163 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Canon Inc. | Canon Office/Small Office Multifunction Printers and Laser Printers | Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. | — | No fix listed | CNA |
- Canon Office/Small Office Multifunction Printers and Laser Printers VendorCanon Inc. Affected Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Fixed in — No fix listed CNA
CPE configurations NVD · 90
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:canon:mf642cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf642cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf644cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf644cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf741cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf741cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf743cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf743cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf745cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf745cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
- cpe:2.3:o:canon:mf642cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf642cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf644cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf644cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf741cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf741cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf743cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf743cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf745cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf745cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
Show 80 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:canon:lbp621c_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp621c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:lbp622c_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp622c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:lbp661c_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp661c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:lbp662c_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp662c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:lbp664c_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp664c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf1127c_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf1127c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf262dw_ii_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf262dw_ii:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf264dw_ii_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf264dw_ii:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf267dw_ii_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf267dw_ii:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf269dw_ii_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf269dw_ii:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf269dw_vp_ii_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf269dw_vp_ii:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf641cw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf641cw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:mf746cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:mf746cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:lbp1127c_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp1127c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:lbp622cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp622cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:lbp623cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp623cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:lbp664cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:lbp664cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:imageprograf_tc-20_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:imageprograf_tc-20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:imageprograf_tc-20m_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:imageprograf_tc-20m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:pixma_g3270_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:pixma_g3270:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:pixma_g4270_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:pixma_g4270:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:maxify_gx3020_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:maxify_gx3020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:maxify_gx4020_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:maxify_gx4020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_lbp621cw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_lbp621cw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_lbp623cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_lbp623cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_lbp633cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_lbp633cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_lbp664cx_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_lbp664cx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_mf641cw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_mf641cw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_mf643cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_mf643cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_mf645cx_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_mf645cx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_mf742cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_mf742cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_mf744cdw_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_mf744cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_mf746cx_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_mf746cx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_x_c1127i_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_x_c1127i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_x_c1127if_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_x_c1127if:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
| cpe:2.3:o:canon:i-sensys_x_c1127p_firmware:*:*:*:*:*:*:*:* | up to 11.04 | Vulnerable | Canon Inc. |
| cpe:2.3:h:canon:i-sensys_x_c1127p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Canon Inc. |
- cpe:2.3:o:canon:lbp621c_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp621c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:lbp622c_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp622c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:lbp661c_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp661c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:lbp662c_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp662c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:lbp664c_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp664c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf1127c_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf1127c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf262dw_ii_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf262dw_ii:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf264dw_ii_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf264dw_ii:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf267dw_ii_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf267dw_ii:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf269dw_ii_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf269dw_ii:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf269dw_vp_ii_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf269dw_vp_ii:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf641cw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf641cw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:mf746cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:mf746cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:lbp1127c_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp1127c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:lbp622cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp622cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:lbp623cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp623cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:lbp664cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:lbp664cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:imageprograf_tc-20_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:imageprograf_tc-20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:imageprograf_tc-20m_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:imageprograf_tc-20m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:pixma_g3270_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:pixma_g3270:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:pixma_g4270_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:pixma_g4270:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:maxify_gx3020_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:maxify_gx3020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:maxify_gx4020_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:maxify_gx4020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_lbp621cw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_lbp621cw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_lbp623cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_lbp623cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_lbp633cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_lbp633cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_lbp664cx_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_lbp664cx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_mf641cw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_mf641cw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_mf643cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_mf643cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_mf645cx_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_mf645cx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_mf742cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_mf742cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_mf744cdw_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_mf744cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_mf746cx_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_mf746cx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_x_c1127i_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_x_c1127i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_x_c1127if_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_x_c1127if:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
- cpe:2.3:o:canon:i-sensys_x_c1127p_firmware:*:*:*:*:*:*:*:* Versions up to 11.04 Vulnerable ·Canon Inc.
- cpe:2.3:h:canon:i-sensys_x_c1127p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Canon Inc.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-0854
- 2026-10-03 Alias added: GHSA-x4x4-qxp5-pgmp
References
Other 4
- https://www.canon-europe.com/support/product-security-latest-news/
- https://psirt.canon/advisory-information/cp2023-001/
- https://canon.jp/support/support-info/230414vulnerability-response
- https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
More Canon Inc. I-sensys Lbp621cw Firmware vulnerabilities
- TI-2023-00811 Stack-based buffer overflow in Canon Office/Small Office Multifunction Printers and Laser… CVSS 3.1CRITICAL 9.8
- TI-2023-00810 Stack-based buffer overflow in Canon Office/Small Office Multifunction Printers and Laser… CVSS 3.1CRITICAL 9.8
- TI-2023-00808 Stack-based buffer overflow in Canon Office/Small Office Multifunction Printers and Laser… CVSS 3.1CRITICAL 9.8
- TI-2023-00807 Stack-based buffer overflow in Canon Office/Small Office Multifunction Printers and Laser… CVSS 3.1CRITICAL 9.8
- TI-2023-00806 Heap-based buffer overflow in Canon Office/Small Office Multifunction Printers and Laser… CVSS 3.1CRITICAL 9.8
- TI-2023-00812 Unintentional change of settings during initial registration of system administrators… CVSS 3.1HIGH 7.5
Sources
- CVE-2023-0854 · CVE Program
- CVE-2023-0854 · NVD
- FIRST EPSS
- GHSA-x4x4-qxp5-pgmp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences