Published:2023/05/24  Last Updated:2023/05/24

JVNVU#94777298
Multiple vulnerabilities in Canon Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers

Overview

Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers provided by Canon Inc. contain multiple vulnerabilities.

Products Affected

A wide range of products and versions are affected.
For more information, refer to "Vendor Status" section below.

Description

Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers provided by Canon Inc. contain multiple vulnerabilities listed below.

  • Heap-based buffer overflow (CWE-122) - CVE-2023-0851, CVE-2023-0854
    CVSS v3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Base Score: 9.8
  • Stack-based buffer overflow (CWE-121) - CVE-2023-0852, CVE-2023-0853, CVE-2023-0855, CVE-2023-0856
    CVSS v3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Base Score: 9.8
  • Integer overflow or wraparound (CWE-190) - CVE-2022-43974
    CVSS v3 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Base Score: 8.1
  • Integer overflow or wraparound (CWE-190) - CVE-2022-43608
    CVSS v3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Base Score: 8.8
  • Incorrect user management (CWE-286) - CVE-2023-0857
    CVSS v3 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Base Score: 5.9
  • Improper access control (CWE-284) - CVE-2023-0858
    CVSS v3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N Base Score: 3.1
  • Improper validation of specified index, position, or offset in input (CWE-1285) - CVE-2023-0859
    CVSS v3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N Base Score: 2.2

Impact

  • A remote attacker may execute an arbitrary code and/or cause a denial-of-service (DoS) condition - CVE-2023-0851, CVE-2023-0852, CVE-2023-0853, CVE-2023-0854, CVE-2023-0855, CVE-2023-0856, CVE-2022-43974
  • An attacker on adjacent network may execute an arbitrary code - CVE-2022-43608
  • A remote attacker may change the product's settings or gain unauthorized access to the product - CVE-2023-0857
  • A remote attacker may gain unauthorized access to the product - CVE-2023-0858
  • An attacker with high privileges may install an arbitrary file on the product - CVE-2023-0859

Solution

Update the firmware
Update the firmware to the latest version according to the information provided by the developer.

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

Credit

Canon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE
JVN iPedia