CVE-2022-24672
High
Description
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15802.
SeverityHigh
CVSS8.8
Exploit probability—
ProductCanon Mf644cdw Firmware
PublishedMar 28, 2023
First seenMar 28, 2023
Weakness typeCWE-122CWE-122
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canon mf644cdw_firmware | No range specified | — |
| canon d1620_firmware | No range specified | — |
| canon d1650_firmware | No range specified | — |
| canon d1520_firmware | No range specified | — |
| canon d1550_firmware | No range specified | — |
| canon mf1127c_firmware | No range specified | — |
| canon mf1238_firmware | No range specified | — |
| canon mf1238_ii_firmware | No range specified | — |
| canon mf1643i_ii_firmware | No range specified | — |
| canon mf1643if_ii_firmware | No range specified | — |
| canon mf414dw_firmware | No range specified | — |
| canon mf416dw_firmware | No range specified | — |
| canon mf419dw_firmware | No range specified | — |
| canon mf515dw_firmware | No range specified | — |
| canon mf424dw_firmware | No range specified | — |
| canon mf426dw_firmware | No range specified | — |
| canon mf429dw_firmware | No range specified | — |
| canon mf525dw_firmware | No range specified | — |
| canon mf445dw_firmware | No range specified | — |
| canon mf448dw_firmware | No range specified | — |
| canon mf449dw_firmware | No range specified | — |
| canon mf543dw_firmware | No range specified | — |
| canon mf451dw_firmware | No range specified | — |
| canon mf452dw_firmware | No range specified | — |
| canon mf453dw_firmware | No range specified | — |
| canon mf455dw_firmware | No range specified | — |
| canon mf6160dw_firmware | No range specified | — |
| canon mf6180dw_firmware | No range specified | — |
| canon mf624cdw_firmware | No range specified | — |
| canon mf628cdw_firmware | No range specified | — |
| canon mf632cdw_firmware | No range specified | — |
| canon mf634cdw_firmware | No range specified | — |
| canon mf641cw_firmware | No range specified | — |
| canon mf642cdw_firmware | No range specified | — |
| canon mf726cdw_firmware | No range specified | — |
| canon mf729cdw_firmware | No range specified | — |
| canon mf731cdw_firmware | No range specified | — |
| canon mf733cdw_firmware | No range specified | — |
| canon mf735cdw_firmware | No range specified | — |
| canon mf741cdw_firmware | No range specified | — |
| canon mf743cdw_firmware | No range specified | — |
| canon mf745cdw_firmware | No range specified | — |
| canon mf746cdw_firmware | No range specified | — |
| canon mf810cdn_firmware | No range specified | — |
| canon mf820cdn_firmware | No range specified | — |
| canon mf8280cw_firmware | No range specified | — |
| canon mf8580cdw_firmware | No range specified | — |
| canon lbp1127c_firmware | No range specified | — |
| canon lbp1238_firmware | No range specified | — |
| canon lbp1238_ii_firmware | No range specified | — |
| canon lbp214dw_firmware | No range specified | — |
| canon lbp215dw_firmware | No range specified | — |
| canon lbp226dw_firmware | No range specified | — |
| canon lbp227dw_firmware | No range specified | — |
| canon lbp228dw_firmware | No range specified | — |
| canon lbp236dw_firmware | No range specified | — |
| canon lbp237dw_firmware | No range specified | — |
| canon lbp251dw_firmware | No range specified | — |
| canon lbp253dw_firmware | No range specified | — |
| canon lbp612cdw_firmware | No range specified | — |
| canon lbp622cdw_firmware | No range specified | — |
| canon lbp623cdw_firmware | No range specified | — |
| canon lbp654cdw_firmware | No range specified | — |
| canon lbp664cdw_firmware | No range specified | — |
| canon ir1435i_firmware | No range specified | — |
| canon 1435if_firmware | No range specified | — |
| canon 1435p_firmware | No range specified | — |
| canon 1435i\+_firmware | No range specified | — |
| canon 1435if\+_firmware | No range specified | — |
| canon 1435p\+_firmware | No range specified | — |
| canon ir1643i_firmware | No range specified | — |
| canon ir1643if_firmware | No range specified | — |
| canon wg7240_firmware | No range specified | — |
| canon wg7250_firmware | No range specified | — |
| canon wg7250f_firmware | No range specified | — |
| canon wg7250z_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.