github - ghsa-8xpr-jq7w-573j

ghsa-8xpr-jq7w-573j

Vulnerability from github

Published

2024-02-06 03:33

Modified

2024-02-13 21:30

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-6234"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-02-06T01:15:09Z",
    "severity": "CRITICAL"
  },
  "details": "Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n",
  "id": "GHSA-8xpr-jq7w-573j",
  "modified": "2024-02-13T21:30:29Z",
  "published": "2024-02-06T03:33:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6234"
    },
    {
      "type": "WEB",
      "url": "https://canon.jp/support/support-info/240205vulnerability-response"
    },
    {
      "type": "WEB",
      "url": "https://psirt.canon/advisory-information/cp2024-001"
    },
    {
      "type": "WEB",
      "url": "https://www.canon-europe.com/support/product-security-latest-news"
    },
    {
      "type": "WEB",
      "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

cve-2023-6234

Vulnerability from cvelistv5

Published

2024-02-06 00:23

Modified

2024-08-02 08:21

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

References

▼	URL	Tags
	https://psirt.canon/advisory-information/cp2024-001/	vendor-advisory
	https://canon.jp/support/support-info/240205vulnerability-response	vendor-advisory
	https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers	vendor-advisory
	https://www.canon-europe.com/support/product-security-latest-news/	vendor-advisory

Impacted products

Vendor

Product

Version

▼

Canon Inc.

Satera LBP670C Series

Version: 03.07 and earlier

Canon Inc.	Satera MF750C Series	Version: 03.07 and earlier
Canon Inc.	Color imageCLASS LBP674C	Version: 03.07 and earlier
Canon Inc.	Color imageCLASS X LBP1333C	Version: 03.07 and earlier
Canon Inc.	Color imageCLASS MF750C Series	Version: 03.07 and earlier
Canon Inc.	Color imageCLASS X MF1333C Series	Version: 03.07 and earlier
Canon Inc.	i-SENSYS LBP673Cdw	Version: 03.07 and earlier
Canon Inc.	C1333P	Version: 03.07 and earlier
Canon Inc.	i-SENSYS MF750C Series	Version: 03.07 and earlier
Canon Inc.	C1333i Series	Version: 03.07 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:canon:lbp674c:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lbp674c",
            "vendor": "canon",
            "versions": [
              {
                "lessThanOrEqual": "3.07",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:canon:lbp1333c:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lbp1333c",
            "vendor": "canon",
            "versions": [
              {
                "lessThanOrEqual": "3.07",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:canon:i-sensys_x_c1333p:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "i-sensys_x_c1333p",
            "vendor": "canon",
            "versions": [
              {
                "lessThanOrEqual": "3.07",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:canon:i-sensys_lbp673cdw:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "i-sensys_lbp673cdw",
            "vendor": "canon",
            "versions": [
              {
                "lessThanOrEqual": "3.07",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:canon:mf1333c:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mf1333c",
            "vendor": "canon",
            "versions": [
              {
                "lessThanOrEqual": "3.07",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:canon:mf750c:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mf750c",
            "vendor": "canon",
            "versions": [
              {
                "lessThanOrEqual": "3.07",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-6234",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-04T14:15:16.906621Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:16:57.552Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T08:21:17.875Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://psirt.canon/advisory-information/cp2024-001/"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://canon.jp/support/support-info/240205vulnerability-response"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.canon-europe.com/support/product-security-latest-news/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Satera LBP670C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Satera MF750C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Color imageCLASS LBP674C",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Color imageCLASS X LBP1333C",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Color imageCLASS MF750C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Color imageCLASS X MF1333C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "i-SENSYS LBP673Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "C1333P",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "i-SENSYS MF750C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "C1333i Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "03.07 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eBuffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\u003c/p\u003e"
            }
          ],
          "value": "Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-06T00:23:28.727Z",
        "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "shortName": "Canon"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.canon/advisory-information/cp2024-001/"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://canon.jp/support/support-info/240205vulnerability-response"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.canon-europe.com/support/product-security-latest-news/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
    "assignerShortName": "Canon",
    "cveId": "CVE-2023-6234",
    "datePublished": "2024-02-06T00:23:28.727Z",
    "dateReserved": "2023-11-21T06:05:11.045Z",
    "dateUpdated": "2024-08-02T08:21:17.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted