description: Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
problem types: CWE-787: Out-of-bounds Write
affected:
{
defaultStatus: unaffected
product: Satera LBP670C Series
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
{
defaultStatus: unaffected
product: Satera MF750C Series
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
{
defaultStatus: unaffected
product: Color imageCLASS LBP674C
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
{
defaultStatus: unaffected
product: Color imageCLASS X LBP1333C
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
{
defaultStatus: unaffected
product: Color imageCLASS MF750C Series
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
{
defaultStatus: unaffected
product: Color imageCLASS X MF1333C Series
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
{
defaultStatus: unaffected
product: i-SENSYS LBP673Cdw
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
{
defaultStatus: unaffected
product: C1333P
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
{
defaultStatus: unaffected
product: i-SENSYS MF750C Series
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
{
defaultStatus: unaffected
product: C1333i Series
vendor: Canon Inc.
versions:
status: affected, version: 03.07 and earlier
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL