CVE-2023-08559.8CriticalCWE-121

CVE-2023-0855: Canon Inc. Canon Office/Small Office Multifunction Printers and Laser Printers vulnerability

Canon Inc. · Canon Office/Small Office Multifunction Printers and Laser Printers

Affected: Canon Inc. Canon Office/Small Office Multifunction Printers and Laser Printers · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.1%probability of exploitation in the next 30 days

67th percentile

050100

Higher than 67% of scored CVEs

9.8CriticalCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Canon Inc. · Canon Office/Small Office Multifunction Printers and Laser PrintersSatera LBP660C Series/LBP620C Series/MF740C Series/MF640C S…

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Stack-based Buffer Overflow · Memory Corruption
Vendor: Canon Inc.
Published: May 2023
Band: Possible (1 to 10%), May 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-0855 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.