Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-14232

Quick assessment

Affected
Canon Inc. Satera LBP670C Series
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Canon ImageRunner等都是日本佳能（Canon）公司的产品。Canon ImageRunner是一系列一体式黑白打印机。Canon imagePROGRAF是一款大幅面打印机。Canon imageCLASS MF644Cdw是一个智能高效的 3 合 1 彩色多功能打印机。 Canon多款产品存在安全漏洞，该漏洞源于XPS文件的XML处理存在缓冲区溢出，可能导致网络攻击者触发产品无响应或执行任意代码。以下产品及版本受到影响：Satera LBP670C Series v06.02及之前版本、

CVSS 9.8 · Critical EPSS 0.92% · P59

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-14232

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
Canon多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Canon ImageRunner等都是日本佳能（Canon）公司的产品。Canon ImageRunner是一系列一体式黑白打印机。Canon imagePROGRAF是一款大幅面打印机。Canon imageCLASS MF644Cdw是一个智能高效的 3 合 1 彩色多功能打印机。 Canon多款产品存在安全漏洞，该漏洞源于XPS文件的XML处理存在缓冲区溢出，可能导致网络攻击者触发产品无响应或执行任意代码。以下产品及版本受到影响：Satera LBP670C Series v06.02及之前版本、
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Canon Inc. Satera LBP670C Series 06.02 and earlier -
Canon Inc. Satera MF750C Series 06.02 and earlier -
Canon Inc. Color imageCLASS LBP630C 06.02 and earlier -
Canon Inc. Color imageCLASS MF650C Series 06.02 and earlier -
Canon Inc. imageCLASS LBP230 Series 06.02 and earlier -
Canon Inc. imageCLASS X LBP1238 II 06.02 and earlier -
Canon Inc. imageCLASS MF450 Series 06.02 and earlier -
Canon Inc. imageCLASS X MF1238 II 06.02 and earlier -
Canon Inc. imageCLASS X MF1643i II 06.02 and earlier -
Canon Inc. imageCLASS X MF1643iF II 06.02 and earlier -
Canon Inc. i-SENSYS LBP630C Series 06.02 and earlier -
Canon Inc. i-SENSYS MF650C Series 06.02 and earlier -
Canon Inc. i-SENSYS LBP230 Series 06.02 and earlier -
Canon Inc. 1238P II 06.02 and earlier -
Canon Inc. 1238Pr II 06.02 and earlier -
Canon Inc. i-SENSYS MF450 Series 06.02 and earlier -
Canon Inc. i-SENSYS MF550 Series 06.02 and earlier -
Canon Inc. 1238i II 06.02 and earlier -
Canon Inc. 1238iF II 06.02 and earlier -
Canon Inc. imageRUNNER 1643i II 06.02 and earlier -
Canon Inc. imageRUNNER 1643iF II 06.02 and earlier -

II. Public POCs for CVE-2025-14232

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-14232

请登录查看更多情报信息。

Same Patch Batch · Canon Inc. · 2026-01-15 · 7 CVEs total

CVE-2025-14237 9.8 CRITICAL Canon多款产品 安全漏洞
CVE-2025-14231 9.8 CRITICAL Canon多款产品 安全漏洞
CVE-2025-14234 9.8 CRITICAL Canon多款产品 安全漏洞
CVE-2025-14236 9.8 CRITICAL Canon多款产品 安全漏洞
CVE-2025-14235 9.8 CRITICAL Canon多款产品 安全漏洞
CVE-2025-14233 9.8 CRITICAL Canon多款产品 安全漏洞

IV. Related Vulnerabilities

Same product: Satera LBP670C Series
Same vendor: Canon Inc.
Same weakness: CWE-787

V. Comments for CVE-2025-14232

No comments yet

Leave a comment