CRITICAL · 9.8

CVE-2023-6233

Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unrespo...

Vulnerability Description

Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CanonMf755Cdw Firmware<= 03.07
CanonMf755Cdw-
CanonMf753Cdw Firmware<= 03.07
CanonMf753Cdw-
CanonMf751Cdw Firmware<= 03.07
CanonMf751Cdw-
CanonLbp674C Firmware<= 03.07
CanonLbp674C-
CanonLbp672C Firmware<= 03.07
CanonLbp672C-
CanonLbp671C Firmware<= 03.07
CanonLbp671C-
CanonMf1238 Ii Firmware<= 03.07
CanonMf1238 Ii-
CanonMf1333C Firmware<= 03.07
CanonMf1333C-
CanonMf1643I Ii Firmware<= 03.07
CanonMf1643I Ii-
CanonMf1643If Ii Firmware<= 03.07
CanonMf1643If Ii-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2023-6233?

CVE-2023-6233 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unrespo...

How severe is CVE-2023-6233?

CVE-2023-6233 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-6233?

Check the references section above for vendor advisories and patch information. Affected products include: Canon Mf755Cdw Firmware, Canon Mf755Cdw, Canon Mf753Cdw Firmware, Canon Mf753Cdw, Canon Mf751Cdw Firmware.