CVE-2023-6231
Description
Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
How to fix
- psirt.canon/advisory-information/cp2024-001/
- canon.jp/support/support-info/240205vulnerability-response
- usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers
- canon-europe.com/support/product-security-latest-news/
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canon lbp674c_firmware | v ≤ 03.07 | — |
| canon mf755cdw_firmware | v ≤ 03.07 | — |
| canon mf753cdw_firmware | v ≤ 03.07 | — |
| canon mf751cdw_firmware | v ≤ 03.07 | — |
| canon lbp672c_firmware | v ≤ 03.07 | — |
| canon lbp671c_firmware | v ≤ 03.07 | — |
| canon mf1238_ii_firmware | v ≤ 03.07 | — |
| canon mf1333c_firmware | v ≤ 03.07 | — |
| canon mf1643i_ii_firmware | v ≤ 03.07 | — |
| canon mf1643if_ii_firmware | v ≤ 03.07 | — |
| canon mf275dw_firmware | v ≤ 03.07 | — |
| canon mf273dw_firmware | v ≤ 03.07 | — |
| canon mf272dw_firmware | v ≤ 03.07 | — |
| canon mf455dw_firmware | v ≤ 03.07 | — |
| canon mf453dw_firmware | v ≤ 03.07 | — |
| canon mf452dw_firmware | v ≤ 03.07 | — |
| canon mf451dw_firmware | v ≤ 03.07 | — |
| canon lbp122dw_firmware | v ≤ 03.07 | — |
| canon lbp1238_ii_firmware | v ≤ 03.07 | — |
| canon lbp1333c_firmware | v ≤ 03.07 | — |
| canon lbp237dw_firmware | v ≤ 03.07 | — |
| canon lbp236dw_firmware | v ≤ 03.07 | — |
| canon lbp674cdw_firmware | v ≤ 03.07 | — |
| canon i-sensys_mf754cdw_firmware | v ≤ 03.07 | — |
| canon i-sensys_x_c1333if_firmware | v ≤ 03.07 | — |
| canon i-sensys_lbp673cdw_firmware | v ≤ 03.07 | — |
| canon i-sensys_mf752cdw_firmware | v ≤ 03.07 | — |
| canon i-sensys_x_c1333i_firmware | v ≤ 03.07 | — |
| canon i-sensys_x_c1333p_firmware | v ≤ 03.07 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.