DeutschShown in its original language — a full translation is planned for a future version.
Canon Drucker: Mehrere Schwachstellen
view advisory published 2023-04-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Canon Druckermodellen ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Dateien zu manipulieren.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0859US | medium5.3 | — | ||
Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/M… | ||||
| CVE-2023-0858US | medium5.3 | — | ||
Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized… | ||||
| CVE-2023-0857US | high7.5 | — | ||
Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and La… | ||||
| CVE-2023-0856US | critical9.8 | — | ||
Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger t… | ||||
| CVE-2023-0855US | critical9.8 | — | ||
Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigg… | ||||
| CVE-2023-0854US | critical9.8 | — | ||
Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the netw… | ||||
| CVE-2023-0853US | critical9.8 | — | ||
Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to… | ||||
| CVE-2023-0852US | critical9.8 | — | ||
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segme… | ||||
| CVE-2023-0851US | critical9.8 | — | ||
Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigge… | ||||
| CVE-2022-43608US | high8.8 | — | ||
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 printers. Authentication is not required… | ||||
| CVE-2022-43974US | critical9.8 | — | ||
MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan