CVE-2022-24673 | Severity.io

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15845.

Related CPE's

Vulnerable

Vulnerable

Vulnerable

Vulnerable

mf1127c_firmware

Vulnerable

mf1238_firmware

Vulnerable

mf1238_ii_firmware

Vulnerable

mf1643i_ii_firmware

Vulnerable

mf1643if_ii_firmware

Vulnerable

mf414dw_firmware

Vulnerable

mf416dw_firmware

Vulnerable

mf419dw_firmware

Vulnerable

mf515dw_firmware

Vulnerable

mf424dw_firmware

Vulnerable

mf426dw_firmware

Vulnerable

mf429dw_firmware

Vulnerable

mf525dw_firmware

Vulnerable

mf445dw_firmware

Vulnerable

mf448dw_firmware

Vulnerable

mf449dw_firmware

Vulnerable

mf543dw_firmware

Vulnerable

mf451dw_firmware

Vulnerable

mf452dw_firmware

Vulnerable

mf453dw_firmware

Vulnerable

mf455dw_firmware

Vulnerable

mf6160dw_firmware

Vulnerable

mf6180dw_firmware

Vulnerable

mf624cdw_firmware

Vulnerable

mf628cdw_firmware

Vulnerable

mf632cdw_firmware

Vulnerable

mf634cdw_firmware

Vulnerable

mf641cw_firmware

Vulnerable

mf642cdw_firmware

Vulnerable

mf644cdw_firmware

Vulnerable

mf726cdw_firmware

Vulnerable

mf729cdw_firmware

Vulnerable

mf731cdw_firmware

Vulnerable

mf733cdw_firmware

Vulnerable

mf735cdw_firmware

Vulnerable

mf741cdw_firmware

Vulnerable

mf743cdw_firmware

Vulnerable

mf745cdw_firmware

Vulnerable

mf746cdw_firmware

Vulnerable

mf810cdn_firmware

Vulnerable

mf820cdn_firmware

Vulnerable

mf8280cw_firmware

Vulnerable

mf8580cdw_firmware

Vulnerable

lbp1127c_firmware

Vulnerable

lbp1238_firmware

Vulnerable

lbp1238_ii_firmware

Vulnerable

lbp214dw_firmware

Vulnerable

lbp215dw_firmware

Vulnerable

lbp226dw_firmware

Vulnerable

lbp227dw_firmware

Vulnerable

lbp228dw_firmware

Vulnerable

lbp236dw_firmware

Vulnerable

lbp237dw_firmware

Vulnerable

lbp251dw_firmware

Vulnerable

lbp253dw_firmware

Vulnerable

lbp612cdw_firmware

Vulnerable

lbp622cdw_firmware

Vulnerable

lbp623cdw_firmware

Vulnerable

lbp654cdw_firmware

Vulnerable

lbp664cdw_firmware

Vulnerable

ir1435i_firmware

Vulnerable

1435if_firmware

Vulnerable

Vulnerable

1435i\+_firmware

Vulnerable

1435if\+_firmware

Vulnerable

1435p\+_firmware

Vulnerable

ir1643i_firmware

Vulnerable

ir1643if_firmware

Vulnerable

wg7240_firmware

Vulnerable

wg7250_firmware

Vulnerable

wg7250f_firmware

Vulnerable

wg7250z_firmware

Vulnerable

References

https://www.usa.canon.com/support/canon-product-advisories/canon-laser-printer-inkjet-printer-and-small-office-multifunctional-printer-measure-against-buffer-overflow

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-22-515/

Third Party AdvisoryVDB Entry

Weaknesses

[email protected]

Primary

CWE-787

[email protected]

Secondary

CWE-121

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

CVSS V3.1
CVSS V3.0
CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-03-28T19:15:10.793

1 year ago

Last modified

2023-04-03T18:52:14.543

1 year ago