Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0853


Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.


Security Impact Summary

This vulnerability carries a CRITICAL severity rating with a CVSS v3.1 score of 9.8, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 90 products from canon, from canon, from canon and 87 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2023-05-11T13:15:11.960

Last Modified

2024-11-21T07:37:57.820

Status

Modified

Source

f98c90f0-e9bd-4fa7-911b-51993f3571fd

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-121
  • Type: Primary
    CWE-787

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System canon mf642cdw_firmware ≤ 11.04 Yes
Hardware canon mf642cdw - No
Operating System canon mf644cdw_firmware ≤ 11.04 Yes
Hardware canon mf644cdw - No
Operating System canon mf741cdw_firmware ≤ 11.04 Yes
Hardware canon mf741cdw - No
Operating System canon mf743cdw_firmware ≤ 11.04 Yes
Hardware canon mf743cdw - No
Operating System canon mf745cdw_firmware ≤ 11.04 Yes
Hardware canon mf745cdw - No
Operating System canon lbp621c_firmware ≤ 11.04 Yes
Hardware canon lbp621c - No
Operating System canon lbp622c_firmware ≤ 11.04 Yes
Hardware canon lbp622c - No
Operating System canon lbp661c_firmware ≤ 11.04 Yes
Hardware canon lbp661c - No
Operating System canon lbp662c_firmware ≤ 11.04 Yes
Hardware canon lbp662c - No
Operating System canon lbp664c_firmware ≤ 11.04 Yes
Hardware canon lbp664c - No
Operating System canon mf1127c_firmware ≤ 11.04 Yes
Hardware canon mf1127c - No
Operating System canon mf262dw_ii_firmware ≤ 11.04 Yes
Hardware canon mf262dw_ii - No
Operating System canon mf264dw_ii_firmware ≤ 11.04 Yes
Hardware canon mf264dw_ii - No
Operating System canon mf267dw_ii_firmware ≤ 11.04 Yes
Hardware canon mf267dw_ii - No
Operating System canon mf269dw_ii_firmware ≤ 11.04 Yes
Hardware canon mf269dw_ii - No
Operating System canon mf269dw_vp_ii_firmware ≤ 11.04 Yes
Hardware canon mf269dw_vp_ii - No
Operating System canon mf272dw_firmware ≤ 11.04 Yes
Hardware canon mf272dw - No
Operating System canon mf273dw_firmware ≤ 11.04 Yes
Hardware canon mf273dw - No
Operating System canon mf275dw_firmware ≤ 11.04 Yes
Hardware canon mf275dw - No
Operating System canon mf641cw_firmware ≤ 11.04 Yes
Hardware canon mf641cw - No
Operating System canon mf746cdw_firmware ≤ 11.04 Yes
Hardware canon mf746cdw - No
Operating System canon lbp122dw_firmware ≤ 11.04 Yes
Hardware canon lbp122dw - No
Operating System canon lbp1127c_firmware ≤ 11.04 Yes
Hardware canon lbp1127c - No
Operating System canon lbp622cdw_firmware ≤ 11.04 Yes
Hardware canon lbp622cdw - No
Operating System canon lbp623cdw_firmware ≤ 11.04 Yes
Hardware canon lbp623cdw - No
Operating System canon lbp664cdw_firmware ≤ 11.04 Yes
Hardware canon lbp664cdw - No
Operating System canon imageprograf_tc-20_firmware ≤ 11.04 Yes
Hardware canon imageprograf_tc-20 - No
Operating System canon imageprograf_tc-20m_firmware ≤ 11.04 Yes
Hardware canon imageprograf_tc-20m - No
Operating System canon pixma_g3270_firmware ≤ 11.04 Yes
Hardware canon pixma_g3270 - No
Operating System canon pixma_g4270_firmware ≤ 11.04 Yes
Hardware canon pixma_g4270 - No
Operating System canon maxify_gx3020_firmware ≤ 11.04 Yes
Hardware canon maxify_gx3020 - No
Operating System canon maxify_gx4020_firmware ≤ 11.04 Yes
Hardware canon maxify_gx4020 - No
Operating System canon i-sensys_lbp621cw_firmware ≤ 11.04 Yes
Hardware canon i-sensys_lbp621cw - No
Operating System canon i-sensys_lbp623cdw_firmware ≤ 11.04 Yes
Hardware canon i-sensys_lbp623cdw - No
Operating System canon i-sensys_lbp633cdw_firmware ≤ 11.04 Yes
Hardware canon i-sensys_lbp633cdw - No
Operating System canon i-sensys_lbp664cx_firmware ≤ 11.04 Yes
Hardware canon i-sensys_lbp664cx - No
Operating System canon i-sensys_mf641cw_firmware ≤ 11.04 Yes
Hardware canon i-sensys_mf641cw - No
Operating System canon i-sensys_mf643cdw_firmware ≤ 11.04 Yes
Hardware canon i-sensys_mf643cdw - No
Operating System canon i-sensys_mf645cx_firmware ≤ 11.04 Yes
Hardware canon i-sensys_mf645cx - No
Operating System canon i-sensys_mf742cdw_firmware ≤ 11.04 Yes
Hardware canon i-sensys_mf742cdw - No
Operating System canon i-sensys_mf744cdw_firmware ≤ 11.04 Yes
Hardware canon i-sensys_mf744cdw - No
Operating System canon i-sensys_mf746cx_firmware ≤ 11.04 Yes
Hardware canon i-sensys_mf746cx - No
Operating System canon i-sensys_x_c1127i_firmware ≤ 11.04 Yes
Hardware canon i-sensys_x_c1127i - No
Operating System canon i-sensys_x_c1127if_firmware ≤ 11.04 Yes
Hardware canon i-sensys_x_c1127if - No
Operating System canon i-sensys_x_c1127p_firmware ≤ 11.04 Yes
Hardware canon i-sensys_x_c1127p - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For canon's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.