9.8

CVE-2024-12647

Medienbericht
Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canon ≫ Mf455dw Firmware Version <= 05.04
   Canon ≫ Mf455dw Version-
Canon ≫ Mf453dw Firmware Version <= 05.04
   Canon ≫ Mf453dw Version-
Canon ≫ Mf452dw Firmware Version <= 05.04
   Canon ≫ Mf452dw Version-
Canon ≫ Mf451dw Firmware Version <= 05.04
   Canon ≫ Mf451dw Version-
Canon ≫ Mf465dw Firmware Version <= 05.04
   Canon ≫ Mf465dw Version-
Canon ≫ Mf462dw Firmware Version <= 05.04
   Canon ≫ Mf462dw Version-
Canon ≫ Mf656cdw Firmware Version <= 05.04
   Canon ≫ Mf656cdw Version-
Canon ≫ Mf654cdw Firmware Version <= 05.04
   Canon ≫ Mf654cdw Version-
Canon ≫ Mf653cdw Firmware Version <= 05.04
   Canon ≫ Mf653cdw Version-
Canon ≫ Mf652cw Firmware Version <= 05.04
   Canon ≫ Mf652cw Version-
Canon ≫ Mf1238 Ii Firmware Version <= 05.04
   Canon ≫ Mf1238 Ii Version-
Canon ≫ Mf1440 Firmware Version <= 05.04
   Canon ≫ Mf1440 Version-
Canon ≫ Mf1643if Ii Firmware Version <= 05.04
   Canon ≫ Mf1643if Ii Version-
Canon ≫ Mf1643i Ii Firmware Version <= 05.04
   Canon ≫ Mf1643i Ii Version-
Canon ≫ Lbp237dw Firmware Version <= 05.04
   Canon ≫ Lbp237dw Version-
Canon ≫ Lbp236dw Firmware Version <= 05.04
   Canon ≫ Lbp236dw Version-
Canon ≫ Lbp247dw Firmware Version <= 05.04
   Canon ≫ Lbp247dw Version-
Canon ≫ Lbp246dw Firmware Version <= 05.04
   Canon ≫ Lbp246dw Version-
Canon ≫ Lbp633cdw Firmware Version <= 05.04
   Canon ≫ Lbp633cdw Version-
Canon ≫ Lbp632cdw Firmware Version <= 05.04
   Canon ≫ Lbp632cdw Version-
Canon ≫ Lbp1238 Ii Firmware Version <= 05.04
   Canon ≫ Lbp1238 Ii Version-
Canon ≫ Lbp1440 Firmware Version <= 05.04
   Canon ≫ Lbp1440 Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.534
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
f98c90f0-e9bd-4fa7-911b-51993f3571fd 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.