Critical severity · published Mar 11, 2024
CVE-2024-2184
Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
9.8
CVSS
0.8%
EPSS
No
On KEV
Description
Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF740C Series/Satera MF640C Series/Satera LBP660C Series/Satera LBP620C Series firmware v12.07 and earlier, and Satera MF750C Series/Satera LBP670C Series firmware v03.09 and earlier sold in Japan.Color imageCLASS MF740C Series/Color imageCLASS MF640C Series/Color imageCLASS X MF1127C/Color imageCLASS LBP664Cdw/Color imageCLASS LBP622Cdw/Color imageCLASS X LBP1127C firmware v12.07 and earlier, and Color imageCLASS MF750C Series/Color imageCLASS X MF1333C/Color imageCLASS LBP674Cdw/Color imageCLASS X LBP1333C firmware v03.09 and earlier sold in US.i-SENSYS MF740C Series/i-SENSYS MF640C Series/C1127i Series/i-SENSYS LBP660C Series/i-SENSYS LBP620C Series/C1127P firmware v12.07 and earlier, and i-SENSYS MF750C Series/C1333i Series/i-SENSYS LBP673Cdw/C1333P firmware v03.09 and earlier sold in Europe.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C1
C1127P · Canon Inc.
v12.07 and earlier · source: vendor, CISA
CS
C1127i Series · Canon Inc.
v12.07 and earlier · source: vendor, CISA
C1
C1333P · Canon Inc.
v03.09 and earlier · source: vendor, CISA
CS
C1333i Series · Canon Inc.
v03.09 and earlier · source: vendor, CISA
CI
Color imageCLASS LBP622Cdw · Canon Inc.
v12.07 and earlier · source: vendor, CISA
CI
Color imageCLASS LBP664Cdw · Canon Inc.
v12.07 and earlier · source: vendor, CISA
CI
Color imageCLASS LBP674Cdw · Canon Inc.
v03.09 and earlier · source: vendor, CISA
CI
Color imageCLASS MF640C Series · Canon Inc.
v12.07 and earlier · source: vendor, CISA
CI
Color imageCLASS MF740C Series · Canon Inc.
v12.07 and earlier · source: vendor, CISA
CI
Color imageCLASS MF750C Series · Canon Inc.
v03.09 and earlier · source: vendor, CISA
CI
Color imageCLASS X LBP1127C · Canon Inc.
v12.07 and earlier · source: vendor, CISA
CI
Color imageCLASS X LBP1333C · Canon Inc.
v03.09 and earlier · source: vendor, CISA