Read the docs
TI-2024-02029 Aliases CVE-2024-2184GHSA-76j8-6c8j-572v

Out-of-bounds write in Canon Inc. Color imageCLASS MF740C Series

Priority MEDIUM 50CWE-787Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF740C Series/Satera MF640C Series/Satera LBP660C Series/Satera LBP620C Series firmware v12.07 and earlier, and Satera MF750C Series/Satera LBP670C Series firmware v03.09 and earlier sold in Japan.Color imageCLASS MF740C Series/Color imageCLASS MF640C Series/Color imageCLASS X MF1127C/Color imageCLASS LBP664Cdw/Color imageCLASS LBP622Cdw/Color imageCLASS X LBP1127C firmware v12.07 and earlier, and Color imageCLASS MF750C Series/Color imageCLASS X MF1333C/Color imageCLASS LBP674Cdw/Color imageCLASS X LBP1333C firmware v03.09 and earlier sold in US.i-SENSYS MF740C Series/i-SENSYS MF640C Series/C1127i Series/i-SENSYS LBP660C Series/i-SENSYS LBP620C Series/C1127P firmware v12.07 and earlier, and i-SENSYS MF750C Series/C1333i Series/i-SENSYS LBP673Cdw/C1333P firmware v03.09 and earlier sold in Europe.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00815 57th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Canon Inc.Color imageCLASS MF740C Seriesup to v12.07—No fix listedCNA
Canon Inc.Color imageCLASS MF640C Seriesup to v12.07—No fix listedCNA
Canon Inc.i-SENSYS MF740C Seriesup to v12.07—No fix listedCNA
Canon Inc.i-SENSYS MF640C Seriesup to v12.07—No fix listedCNA
Canon Inc.Satera MF740C Seriesup to v12.07—No fix listedCNA
Canon Inc.Satera MF640C Seriesup to v12.07—No fix listedCNA
Canon Inc.Color imageCLASS X MF1127Cup to v12.07—No fix listedCNA
Canon Inc.C1127i Seriesup to v12.07—No fix listedCNA
Canon Inc.Color imageCLASS LBP664Cdwup to v12.07—No fix listedCNA
Canon Inc.Color imageCLASS LBP622Cdwup to v12.07—No fix listedCNA
Canon Inc.i-SENSYS LBP660C Seriesup to v12.07—No fix listedCNA
Canon Inc.i-SENSYS LBP620C Seriesup to v12.07—No fix listedCNA
Canon Inc.Satera LBP660C Seriesup to v12.07—No fix listedCNA
Canon Inc.Satera LBP620C Seriesup to v12.07—No fix listedCNA
Canon Inc.Color imageCLASS X LBP1127Cup to v12.07—No fix listedCNA
Canon Inc.C1127Pup to v12.07—No fix listedCNA
Canon Inc.Color imageCLASS MF750C Seriesup to v03.09—No fix listedCNA
Canon Inc.i-SENSYS MF750C Seriesup to v03.09—No fix listedCNA
Canon Inc.Satera MF750C Seriesup to v03.09—No fix listedCNA
Canon Inc.Color imageCLASS X MF1333Cup to v03.09—No fix listedCNA
Canon Inc.C1333i Seriesup to v03.09—No fix listedCNA
Canon Inc.Color imageCLASS LBP674Cdwup to v03.09—No fix listedCNA
Canon Inc.i-SENSYS LBP673Cdwup to v03.09—No fix listedCNA
Canon Inc.Satera LBP670C Seriesup to v03.09—No fix listedCNA
Canon Inc.Color imageCLASS X LBP1333Cup to v03.09—No fix listedCNA
Canon Inc.C1333Pup to v03.09—No fix listedCNA
  • Color imageCLASS MF740C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Color imageCLASS MF640C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • i-SENSYS MF740C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • i-SENSYS MF640C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Satera MF740C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Satera MF640C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Color imageCLASS X MF1127C VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • C1127i Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Color imageCLASS LBP664Cdw VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Color imageCLASS LBP622Cdw VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • i-SENSYS LBP660C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • i-SENSYS LBP620C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Satera LBP660C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Satera LBP620C Series VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Color imageCLASS X LBP1127C VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • C1127P VendorCanon Inc. Affected up to v12.07 Fixed in — No fix listed CNA
  • Color imageCLASS MF750C Series VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA
  • i-SENSYS MF750C Series VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA
  • Satera MF750C Series VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA
  • Color imageCLASS X MF1333C VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA
  • C1333i Series VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA
  • Color imageCLASS LBP674Cdw VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA
  • i-SENSYS LBP673Cdw VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA
  • Satera LBP670C Series VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA
  • Color imageCLASS X LBP1333C VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA
  • C1333P VendorCanon Inc. Affected up to v03.09 Fixed in — No fix listed CNA

CPE names CISA-ADP · 26

CPEVersionsRoleVendor
cpe:2.3:h:canon:color_imageclass_mf740c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:color_imageclass_mf640c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:i-sensys_mf740c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:i-sensys_mf640c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:satera_mf740c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:color_imageclass_x_mf1127c:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:color_imageclass_lbp664cdw:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:c1127i_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:color_imageclass_lbp622cdw:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:i-sensys_lbp660c_series:*:*:*:*:*:*:*:*——Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_mf740c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_mf640c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:i-sensys_mf740c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:i-sensys_mf640c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:satera_mf740c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_x_mf1127c:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_lbp664cdw:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:c1127i_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_lbp622cdw:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:i-sensys_lbp660c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:canon:i-sensys_lbp620c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:i-sensys_mf750c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:color_imageclass_x_lbp1333c:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:i-sensys_lbp673cdw:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:satera_lbp670c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:c1333p:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:satera_mf640c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:satera_lbp620c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:satera_lbp660c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:color_imageclass_x_lbp1127c:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:color_imageclass_mf750c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:c1127p:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:satera_mf750c_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:color_imageclass_x_mf1333c:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:c1333i_series:*:*:*:*:*:*:*:*——Canon Inc.
cpe:2.3:h:canon:color_imageclass_lbp674cdw:*:*:*:*:*:*:*:*——Canon Inc.
  • cpe:2.3:h:canon:i-sensys_lbp620c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:i-sensys_mf750c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_x_lbp1333c:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:i-sensys_lbp673cdw:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:satera_lbp670c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:c1333p:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:satera_mf640c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:satera_lbp620c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:satera_lbp660c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_x_lbp1127c:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_mf750c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:c1127p:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:satera_mf750c_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_x_mf1333c:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:c1333i_series:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.
  • cpe:2.3:h:canon:color_imageclass_lbp674cdw:*:*:*:*:*:*:*:* Versions — — ·Canon Inc.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-2184
  2. 2026-10-03 Alias added: GHSA-76j8-6c8j-572v

References

Advisory 1

  • TI-2006-01145 Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote… CVSS 2.0HIGH 7.5
  • TI-2006-01147 Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary… CVSS 2.0HIGH 7.5
  • TI-2023-05725 Out-of-bounds write in Canon Inc. Satera LBP670C Series CVSS 3.1CRITICAL 9.8
  • TI-2025-01879 Out-of-bounds write in Canon Inc. Satera MF656Cdw CVSS 3.1CRITICAL 9.8
  • TI-2024-11734 Out-of-bounds write in Canon Inc. Satera MF656Cdw CVSS 3.1CRITICAL 9.8
  • TI-2024-11733 Out-of-bounds write in Canon Inc. Satera MF656Cdw CVSS 3.1CRITICAL 9.8
See all 96 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences