Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-6229

Quick assessment

Affected
Canon Inc. Satera LBP670C Series
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Canon Color imageCLASS是日本佳能（Canon）公司的一系列打印机。 Canon 多款产品存在安全漏洞。攻击者利用该漏洞可以执行任意代码。以下产品及版本受到影响：Color imageCLASS LBP674C、Color imageCLASS X LBP1333C、Color imageCLASS MF750C Series、Color imageCLASS X MF1333C Series firmware v03.07版本及之前版本；i-SENSYS LBP673Cdw、C133

CVSS 9.8 · Critical EPSS 1.38% · P71
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-6229

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
Canon多款产品缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Canon Color imageCLASS是日本佳能（Canon）公司的一系列打印机。 Canon 多款产品存在安全漏洞。攻击者利用该漏洞可以执行任意代码。以下产品及版本受到影响：Color imageCLASS LBP674C、Color imageCLASS X LBP1333C、Color imageCLASS MF750C Series、Color imageCLASS X MF1333C Series firmware v03.07版本及之前版本；i-SENSYS LBP673Cdw、C133
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Canon Inc. Satera LBP670C Series 03.07 and earlier -
Canon Inc. Satera MF750C Series 03.07 and earlier -
Canon Inc. Color imageCLASS LBP674C 03.07 and earlier -
Canon Inc. Color imageCLASS X LBP1333C 03.07 and earlier -
Canon Inc. Color imageCLASS MF750C Series 03.07 and earlier -
Canon Inc. Color imageCLASS X MF1333C Series 03.07 and earlier -
Canon Inc. i-SENSYS LBP673Cdw 03.07 and earlier -
Canon Inc. C1333P 03.07 and earlier -
Canon Inc. i-SENSYS MF750C Series 03.07 and earlier -
Canon Inc. C1333i Series 03.07 and earlier -

II. Public POCs for CVE-2023-6229

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-6229

请登录查看更多情报信息。

Other References for CVE-2023-6229 (4)

Same Patch Batch · Canon Inc. · 2024-02-06 · 7 CVEs total

CVE-2023-6230 9.8 CRITICAL Canon 多款产品缓冲区错误漏洞
CVE-2023-6231 9.8 CRITICAL Canon 多款产品缓冲区错误漏洞
CVE-2023-6232 9.8 CRITICAL Canon 多款产品缓冲区错误漏洞
CVE-2023-6233 9.8 CRITICAL Canon 多款产品缓冲区错误漏洞
CVE-2023-6234 9.8 CRITICAL Canon 多款产品缓冲区错误漏洞
CVE-2024-0244 9.8 CRITICAL Canon 多款产品缓冲区错误漏洞

IV. Related Vulnerabilities

Same product: Satera LBP670C Series
Same vendor: Canon Inc.
Same weakness: CWE-787

V. Comments for CVE-2023-6229

No comments yet

Leave a comment