CVE-2023-6233

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-6233
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://canon.jp/support/support-info/240205vulnerability-response Vendor Advisory
https://psirt.canon/advisory-information/cp2024-001/ Vendor Advisory
https://www.canon-europe.com/support/product-security-latest-news/ Vendor Advisory
https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*
History

13 Feb 2024, 19:51

Type Values Removed Values Added
References () https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers - () https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers - Vendor Advisory
References () https://psirt.canon/advisory-information/cp2024-001/ - () https://psirt.canon/advisory-information/cp2024-001/ - Vendor Advisory
References () https://www.canon-europe.com/support/product-security-latest-news/ - () https://www.canon-europe.com/support/product-security-latest-news/ - Vendor Advisory
References () https://canon.jp/support/support-info/240205vulnerability-response - () https://canon.jp/support/support-info/240205vulnerability-response - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
First Time Canon mf455dw Firmware
Canon i-sensys X C1333p
Canon mf275dw Firmware
Canon mf1643if Ii Firmware
Canon i-sensys Lbp673cdw
Canon i-sensys X C1333i
Canon mf273dw Firmware
Canon lbp674cdw
Canon mf1333c
Canon i-sensys Mf752cdw Firmware
Canon
Canon mf1643if Ii
Canon i-sensys Mf754cdw Firmware
Canon lbp122dw Firmware
Canon lbp1333c
Canon mf751cdw
Canon mf1238 Ii Firmware
Canon lbp236dw
Canon lbp674cdw Firmware
Canon i-sensys Lbp673cdw Firmware
Canon mf453dw
Canon i-sensys Mf754cdw
Canon mf753cdw
Canon mf751cdw Firmware
Canon i-sensys X C1333i Firmware
Canon mf452dw
Canon mf453dw Firmware
Canon lbp237dw
Canon lbp236dw Firmware
Canon lbp671c
Canon mf1238 Ii
Canon i-sensys X C1333p Firmware
Canon mf1643i Ii Firmware
Canon mf452dw Firmware
Canon mf1333c Firmware
Canon mf272dw Firmware
Canon mf451dw
Canon i-sensys Mf752cdw
Canon lbp1238 Ii
Canon mf273dw
Canon mf275dw
Canon mf755cdw
Canon lbp674c
Canon lbp672c Firmware
Canon lbp237dw Firmware
Canon mf455dw
Canon mf272dw
Canon mf755cdw Firmware
Canon lbp1333c Firmware
Canon mf1643i Ii
Canon lbp122dw
Canon lbp672c
Canon lbp1238 Ii Firmware
Canon mf753cdw Firmware
Canon lbp674c Firmware
Canon lbp671c Firmware
Canon i-sensys X C1333if Firmware
Canon i-sensys X C1333if
Canon mf451dw Firmware
CWE CWE-787
CPE cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*

06 Feb 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-06 01:15

Updated : 2024-02-28 20:54

NVD link : CVE-2023-6233

Mitre link : CVE-2023-6233

CVE.ORG link : CVE-2023-6233

JSON object : View

Products Affected

canon

  • mf1238_ii
  • i-sensys_mf752cdw
  • mf455dw_firmware
  • mf451dw
  • lbp1238_ii_firmware
  • lbp122dw
  • i-sensys_x_c1333i
  • mf453dw
  • lbp1333c
  • mf753cdw
  • lbp672c
  • lbp237dw
  • i-sensys_x_c1333if
  • lbp1333c_firmware
  • mf1333c
  • i-sensys_mf754cdw_firmware
  • mf272dw
  • lbp672c_firmware
  • mf275dw_firmware
  • mf272dw_firmware
  • mf452dw_firmware
  • lbp122dw_firmware
  • i-sensys_lbp673cdw
  • mf753cdw_firmware
  • lbp671c_firmware
  • mf1643if_ii_firmware
  • mf273dw
  • lbp1238_ii
  • mf755cdw
  • mf751cdw_firmware
  • mf275dw
  • i-sensys_mf754cdw
  • i-sensys_x_c1333p
  • lbp237dw_firmware
  • i-sensys_mf752cdw_firmware
  • i-sensys_x_c1333if_firmware
  • mf751cdw
  • i-sensys_x_c1333p_firmware
  • i-sensys_lbp673cdw_firmware
  • mf453dw_firmware
  • lbp236dw
  • lbp674c
  • i-sensys_x_c1333i_firmware
  • mf1333c_firmware
  • mf1643if_ii
  • mf455dw
  • mf451dw_firmware
  • lbp674c_firmware
  • lbp671c
  • mf1643i_ii_firmware
  • lbp674cdw_firmware
  • mf1238_ii_firmware
  • mf1643i_ii
  • mf755cdw_firmware
  • lbp236dw_firmware
  • mf273dw_firmware
  • mf452dw
  • lbp674cdw
CWE
CWE-787

Out-of-bounds Write