peter bassill · operator
$ cve CVE-2022-24673 JSON

CVE-2022-24673

9.8
CRITICAL · CVSS 3.1 · EPSS 2.6% (pctl 85)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15845.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS2.63% — more likely to be exploited than 85% of all CVEs
WeaknessCWE-121
On CISA KEVno
Public exploitnone known
Published2023-03-28
Last modified2026-06-17

Affected (40)

VendorProduct
canond1520
canond1520 firmware
canond1550
canond1550 firmware
canond1620
canond1620 firmware
canond1650
canond1650 firmware
canonmf1127c
canonmf1127c firmware
canonmf1238
canonmf1238 firmware
canonmf1238 ii
canonmf1238 ii firmware
canonmf1643i ii
canonmf1643i ii firmware
canonmf1643if ii
canonmf1643if ii firmware
canonmf414dw
canonmf414dw firmware
canonmf416dw
canonmf416dw firmware
canonmf419dw
canonmf419dw firmware
canonmf424dw
canonmf424dw firmware
canonmf426dw
canonmf426dw firmware
canonmf429dw
canonmf429dw firmware
canonmf445dw
canonmf445dw firmware
canonmf448dw
canonmf448dw firmware
canonmf449dw
canonmf449dw firmware
canonmf515dw
canonmf515dw firmware
canonmf525dw
canonmf525dw firmware

References

→ the Explorer  ·  watch your stack  ·  NVD