9.8

CVE-2024-12649

Media report

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorCanon Inc.
≫
Product Satera MF656Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product Satera MF654Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product Color imageCLASS MF656Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product Color imageCLASS MF654Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product Color imageCLASS MF653Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product Color imageCLASS MF652Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product Color imageCLASS LBP633Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product Color imageCLASS LBP632Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product i-SENSYS MF657Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product i-SENSYS MF655Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product i-SENSYS MF651Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product i-SENSYS LBP633Cdw
Version 05.04 and earlier
Status affected
VendorCanon Inc.
≫
Product i-SENSYS LBP631Cdw
Version 05.04 and earlier
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.18% 0.407
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
f98c90f0-e9bd-4fa7-911b-51993f3571fd 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.