github - ghsa-p8vf-p5g9-f6j7

GHSA-P8VF-P5G9-F6J7

Vulnerability from github – Published: 2025-01-28 03:31 – Updated: 2025-01-28 03:31

Details

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Severity ?

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-12647"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-01-28T01:15:08Z",
    "severity": "CRITICAL"
  },
  "details": "Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.",
  "id": "GHSA-p8vf-p5g9-f6j7",
  "modified": "2025-01-28T03:31:13Z",
  "published": "2025-01-28T03:31:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12647"
    },
    {
      "type": "WEB",
      "url": "https://canon.jp/support/support-info/250127vulnerability-response"
    },
    {
      "type": "WEB",
      "url": "https://psirt.canon/advisory-information/cp2025-001"
    },
    {
      "type": "WEB",
      "url": "https://www.canon-europe.com/support/product-security/#news"
    },
    {
      "type": "WEB",
      "url": "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2024-12647 (GCVE-0-2024-12647)

Vulnerability from cvelistv5 – Published: 2025-01-28 00:38 – Updated: 2025-01-28 15:17

Summary

Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

Canon

References

URL

Tags

	https://psirt.canon/advisory-information/cp2025-001/	vendor-advisory
	https://canon.jp/support/support-info/250127vulne…	vendor-advisory
	https://www.usa.canon.com/support/canon-product-a…	vendor-advisory
	https://www.canon-europe.com/support/product-secu…	vendor-advisory

Impacted products

Vendor

Product

Version

Canon Inc.

Satera MF656Cdw

Affected: 05.04 and earlier

Canon Inc.	Satera MF654Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS MF656Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS MF654Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS MF653Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS MF652Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS LBP633Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS LBP632Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS MF657Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS MF655Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS MF651Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS LBP633Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS LBP631Cdw	Affected: 05.04 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-12647",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T14:55:53.062158Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-28T15:17:41.020Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Satera MF656Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Satera MF654Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF656Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF654Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF653Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF652Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP633Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP632Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF657Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF655Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF651Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP633Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP631Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eBuffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \u003c/p\u003e"
            }
          ],
          "value": "Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-28T00:38:17.973Z",
        "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "shortName": "Canon"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.canon/advisory-information/cp2025-001/"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://canon.jp/support/support-info/250127vulnerability-response"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.canon-europe.com/support/product-security/#news"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
    "assignerShortName": "Canon",
    "cveId": "CVE-2024-12647",
    "datePublished": "2025-01-28T00:38:17.973Z",
    "dateReserved": "2024-12-16T02:41:57.265Z",
    "dateUpdated": "2025-01-28T15:17:41.020Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-P8VF-P5G9-F6J7

CVE-2024-12647 (GCVE-0-2024-12647)

Tags

Sightings

Nomenclature