CVE-2023-62299.8CriticalCWE-787

CVE-2023-6229: Canon Inc. Satera LBP670C Series vulnerability

Canon Inc. · Satera LBP670C Series

Vendor fix available · Affected: Canon Inc. Satera LBP670C Series · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.4%probability of exploitation in the next 30 days

72nd percentile

050100

Higher than 72% of scored CVEs

9.8CriticalCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

Affected products10

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Canon Inc. · Satera LBP670C Series03.07 and earlier
Canon Inc. · Satera MF750C Series03.07 and earlier
Canon Inc. · Color imageCLASS LBP674C03.07 and earlier
Canon Inc. · Color imageCLASS X LBP1333C03.07 and earlier
Canon Inc. · Color imageCLASS MF750C Series03.07 and earlier
Canon Inc. · Color imageCLASS X MF1333C Series03.07 and earlier
Canon Inc. · i-SENSYS LBP673Cdw03.07 and earlier
Canon Inc. · C1333P03.07 and earlier
Canon Inc. · i-SENSYS MF750C Series03.07 and earlier
Canon Inc. · C1333i Series03.07 and earlier

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Out-of-bounds Write · Memory Corruption
Vendor: Canon Inc.
Published: February 2024
Band: Possible (1 to 10%), February 2024

CoverageNo articles yet

No CyberSIXT article names CVE-2023-6229 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.