CVE-2023-6233

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-6233
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://canon.jp/support/support-info/240205vulnerability-response Vendor Advisory
https://psirt.canon/advisory-information/cp2024-001/ Vendor Advisory
https://www.canon-europe.com/support/product-security-latest-news/ Vendor Advisory
https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers Vendor Advisory
https://canon.jp/support/support-info/240205vulnerability-response Vendor Advisory
https://psirt.canon/advisory-information/cp2024-001/ Vendor Advisory
https://www.canon-europe.com/support/product-security-latest-news/ Vendor Advisory
https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*
History

21 Nov 2024, 08:43

Type Values Removed Values Added
References () https://canon.jp/support/support-info/240205vulnerability-response - Vendor Advisory () https://canon.jp/support/support-info/240205vulnerability-response - Vendor Advisory
References () https://psirt.canon/advisory-information/cp2024-001/ - Vendor Advisory () https://psirt.canon/advisory-information/cp2024-001/ - Vendor Advisory
References () https://www.canon-europe.com/support/product-security-latest-news/ - Vendor Advisory () https://www.canon-europe.com/support/product-security-latest-news/ - Vendor Advisory
References () https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers - Vendor Advisory () https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers - Vendor Advisory

13 Feb 2024, 19:51

Type Values Removed Values Added
References () https://canon.jp/support/support-info/240205vulnerability-response - () https://canon.jp/support/support-info/240205vulnerability-response - Vendor Advisory
References () https://psirt.canon/advisory-information/cp2024-001/ - () https://psirt.canon/advisory-information/cp2024-001/ - Vendor Advisory
References () https://www.canon-europe.com/support/product-security-latest-news/ - () https://www.canon-europe.com/support/product-security-latest-news/ - Vendor Advisory
References () https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers - () https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers - Vendor Advisory
First Time Canon i-sensys Mf752cdw Firmware
Canon mf451dw Firmware
Canon mf452dw
Canon mf453dw Firmware
Canon mf1333c Firmware
Canon lbp1238 Ii
Canon mf275dw
Canon i-sensys X C1333i Firmware
Canon mf273dw Firmware
Canon mf1643if Ii
Canon mf753cdw
Canon mf1238 Ii
Canon lbp672c
Canon lbp122dw
Canon mf272dw Firmware
Canon i-sensys Lbp673cdw Firmware
Canon mf755cdw
Canon i-sensys Mf754cdw
Canon lbp237dw
Canon i-sensys X C1333if Firmware
Canon mf275dw Firmware
Canon mf751cdw
Canon lbp674c Firmware
Canon mf453dw
Canon mf455dw Firmware
Canon mf1333c
Canon mf1238 Ii Firmware
Canon mf451dw
Canon mf273dw
Canon mf455dw
Canon lbp671c Firmware
Canon mf272dw
Canon lbp122dw Firmware
Canon mf1643i Ii
Canon mf755cdw Firmware
Canon lbp674cdw Firmware
Canon i-sensys X C1333p Firmware
Canon mf452dw Firmware
Canon
Canon lbp1333c
Canon mf1643i Ii Firmware
Canon mf753cdw Firmware
Canon lbp236dw Firmware
Canon i-sensys X C1333if
Canon mf1643if Ii Firmware
Canon i-sensys X C1333p
Canon lbp671c
Canon lbp237dw Firmware
Canon lbp236dw
Canon lbp1238 Ii Firmware
Canon lbp1333c Firmware
Canon i-sensys Mf752cdw
Canon mf751cdw Firmware
Canon lbp674c
Canon lbp674cdw
Canon i-sensys Lbp673cdw
Canon lbp672c Firmware
Canon i-sensys Mf754cdw Firmware
Canon i-sensys X C1333i
CPE cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf751cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf753cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf752cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_c1333if_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp674cdw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf755cdw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp672c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf1333c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333i:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf754cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp674c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp671c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp674cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_lbp673cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp672c:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_c1333i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp1333c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf753cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf754cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf751cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_c1333if:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf752cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp671c:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_c1333p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:mf755cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*

06 Feb 2024, 13:53

Type Values Removed Values Added
Summary
  • (es) Desbordamiento de búfer en el proceso de solicitud de atributos SLP de impresoras multifunción de oficina e impresoras láser (*) que puede permitir que un atacante en el segmento de red haga que el producto afectado no responda o ejecute código arbitrario.*: firmware Satera LBP670C Series/Satera MF750C Series v03 .07 y anteriores vendidos en Japón. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 y anteriores vendidos en EE. UU. Firmware i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series v03.07 y anteriores vendidos en Europa.

06 Feb 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-06 01:15

Updated : 2024-11-21 08:43

NVD link : CVE-2023-6233

Mitre link : CVE-2023-6233

CVE.ORG link : CVE-2023-6233

JSON object : View

Products Affected

canon

  • lbp1238_ii
  • lbp236dw_firmware
  • mf1333c
  • i-sensys_x_c1333i_firmware
  • lbp674cdw
  • i-sensys_x_c1333p_firmware
  • mf751cdw_firmware
  • mf453dw
  • lbp671c
  • lbp1238_ii_firmware
  • lbp674cdw_firmware
  • i-sensys_mf752cdw
  • mf275dw
  • i-sensys_mf752cdw_firmware
  • mf451dw
  • lbp674c_firmware
  • mf453dw_firmware
  • lbp122dw
  • lbp237dw_firmware
  • lbp1333c_firmware
  • lbp1333c
  • mf1333c_firmware
  • mf755cdw_firmware
  • lbp672c_firmware
  • lbp674c
  • mf273dw
  • mf452dw_firmware
  • i-sensys_x_c1333if
  • lbp671c_firmware
  • lbp237dw
  • i-sensys_x_c1333if_firmware
  • mf753cdw
  • mf273dw_firmware
  • mf452dw
  • mf753cdw_firmware
  • lbp672c
  • i-sensys_mf754cdw
  • mf455dw
  • mf1643if_ii_firmware
  • mf275dw_firmware
  • i-sensys_lbp673cdw
  • mf1238_ii_firmware
  • mf1643if_ii
  • i-sensys_x_c1333p
  • mf272dw_firmware
  • i-sensys_x_c1333i
  • mf1238_ii
  • mf755cdw
  • lbp122dw_firmware
  • mf1643i_ii_firmware
  • mf455dw_firmware
  • i-sensys_mf754cdw_firmware
  • mf751cdw
  • i-sensys_lbp673cdw_firmware
  • mf272dw
  • mf1643i_ii
  • lbp236dw
  • mf451dw_firmware
CWE
CWE-787

Out-of-bounds Write