5.3
CVE-2023-0859
- EPSS 0.54%
- Veröffentlicht 11.05.2023 13:15:13
- Zuletzt bearbeitet 21.11.2024 07:37:59
- Erkennungen
LoginArbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canon ≫ Mf642cdw Firmware Version <= 11.04
Canon ≫ Mf644cdw Firmware Version <= 11.04
Canon ≫ Mf741cdw Firmware Version <= 11.04
Canon ≫ Mf743cdw Firmware Version <= 11.04
Canon ≫ Mf745cdw Firmware Version <= 11.04
Canon ≫ Lbp621c Firmware Version <= 11.04
Canon ≫ Lbp622c Firmware Version <= 11.04
Canon ≫ Lbp661c Firmware Version <= 11.04
Canon ≫ Lbp662c Firmware Version <= 11.04
Canon ≫ Lbp664c Firmware Version <= 11.04
Canon ≫ Mf1127c Firmware Version <= 11.04
Canon ≫ Mf262dw Ii Firmware Version <= 11.04
Canon ≫ Mf264dw Ii Firmware Version <= 11.04
Canon ≫ Mf267dw Ii Firmware Version <= 11.04
Canon ≫ Mf269dw Ii Firmware Version <= 11.04
Canon ≫ Mf269dw Vp Ii Firmware Version <= 11.04
Canon ≫ Mf272dw Firmware Version <= 11.04
Canon ≫ Mf273dw Firmware Version <= 11.04
Canon ≫ Mf275dw Firmware Version <= 11.04
Canon ≫ Mf641cw Firmware Version <= 11.04
Canon ≫ Mf746cdw Firmware Version <= 11.04
Canon ≫ Lbp122dw Firmware Version <= 11.04
Canon ≫ Lbp1127c Firmware Version <= 11.04
Canon ≫ Lbp622cdw Firmware Version <= 11.04
Canon ≫ Lbp623cdw Firmware Version <= 11.04
Canon ≫ Lbp664cdw Firmware Version <= 11.04
Canon ≫ Imageprograf Tc-20 Firmware Version <= 11.04
Canon ≫ Imageprograf Tc-20m Firmware Version <= 11.04
Canon ≫ Pixma G3270 Firmware Version <= 11.04
Canon ≫ Pixma G4270 Firmware Version <= 11.04
Canon ≫ Maxify Gx3020 Firmware Version <= 11.04
Canon ≫ Maxify Gx4020 Firmware Version <= 11.04
Canon ≫ I-sensys Lbp621cw Firmware Version <= 11.04
Canon ≫ I-sensys Lbp623cdw Firmware Version <= 11.04
Canon ≫ I-sensys Lbp633cdw Firmware Version <= 11.04
Canon ≫ I-sensys Lbp664cx Firmware Version <= 11.04
Canon ≫ I-sensys Mf641cw Firmware Version <= 11.04
Canon ≫ I-sensys Mf643cdw Firmware Version <= 11.04
Canon ≫ I-sensys Mf645cx Firmware Version <= 11.04
Canon ≫ I-sensys Mf742cdw Firmware Version <= 11.04
Canon ≫ I-sensys Mf744cdw Firmware Version <= 11.04
Canon ≫ I-sensys Mf746cx Firmware Version <= 11.04
Canon ≫ I-sensys X C1127i Firmware Version <= 11.04
Canon ≫ I-sensys X C1127if Firmware Version <= 11.04
Canon ≫ I-sensys X C1127p Firmware Version <= 11.04
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.54% | 0.413 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
| Canon | 2.2 | 0.7 | 1.4 |
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
|
CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input
The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.
https://www.canon-europe.com/support/product-security-latest-news/
https://canon.jp/support/support-info/230414vulnerability-response
https://psirt.canon/advisory-information/cp2023-001/
https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow