CVE-2023-0857
Description
Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canon mf1127c_firmware | v ≤ 11.04 | — |
| canon mf642cdw_firmware | v ≤ 11.04 | — |
| canon mf644cdw_firmware | v ≤ 11.04 | — |
| canon mf741cdw_firmware | v ≤ 11.04 | — |
| canon mf743cdw_firmware | v ≤ 11.04 | — |
| canon mf745cdw_firmware | v ≤ 11.04 | — |
| canon lbp621c_firmware | v ≤ 11.04 | — |
| canon lbp622c_firmware | v ≤ 11.04 | — |
| canon lbp661c_firmware | v ≤ 11.04 | — |
| canon lbp662c_firmware | v ≤ 11.04 | — |
| canon lbp664c_firmware | v ≤ 11.04 | — |
| canon mf262dw_ii_firmware | v ≤ 11.04 | — |
| canon mf264dw_ii_firmware | v ≤ 11.04 | — |
| canon mf267dw_ii_firmware | v ≤ 11.04 | — |
| canon mf269dw_ii_firmware | v ≤ 11.04 | — |
| canon mf269dw_vp_ii_firmware | v ≤ 11.04 | — |
| canon mf272dw_firmware | v ≤ 11.04 | — |
| canon mf273dw_firmware | v ≤ 11.04 | — |
| canon mf275dw_firmware | v ≤ 11.04 | — |
| canon mf641cw_firmware | v ≤ 11.04 | — |
| canon mf746cdw_firmware | v ≤ 11.04 | — |
| canon lbp122dw_firmware | v ≤ 11.04 | — |
| canon lbp1127c_firmware | v ≤ 11.04 | — |
| canon lbp622cdw_firmware | v ≤ 11.04 | — |
| canon lbp623cdw_firmware | v ≤ 11.04 | — |
| canon lbp664cdw_firmware | v ≤ 11.04 | — |
| canon imageprograf_tc-20_firmware | v ≤ 11.04 | — |
| canon imageprograf_tc-20m_firmware | v ≤ 11.04 | — |
| canon pixma_g3270_firmware | v ≤ 11.04 | — |
| canon pixma_g4270_firmware | v ≤ 11.04 | — |
| canon maxify_gx3020_firmware | v ≤ 11.04 | — |
| canon maxify_gx4020_firmware | v ≤ 11.04 | — |
| canon i-sensys_lbp621cw_firmware | v ≤ 11.04 | — |
| canon i-sensys_lbp623cdw_firmware | v ≤ 11.04 | — |
| canon i-sensys_lbp633cdw_firmware | v ≤ 11.04 | — |
| canon i-sensys_lbp664cx_firmware | v ≤ 11.04 | — |
| canon i-sensys_mf641cw_firmware | v ≤ 11.04 | — |
| canon i-sensys_mf643cdw_firmware | v ≤ 11.04 | — |
| canon i-sensys_mf645cx_firmware | v ≤ 11.04 | — |
| canon i-sensys_mf742cdw_firmware | v ≤ 11.04 | — |
| canon i-sensys_mf744cdw_firmware | v ≤ 11.04 | — |
| canon i-sensys_mf746cx_firmware | v ≤ 11.04 | — |
| canon i-sensys_x_c1127i_firmware | v ≤ 11.04 | — |
| canon i-sensys_x_c1127if_firmware | v ≤ 11.04 | — |
| canon i-sensys_x_c1127p_firmware | v ≤ 11.04 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.