description: Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF740C Series/Satera MF640C Series/Satera LBP660C Series/Satera LBP620C Series firmware v12.07 and earlier, and Satera MF750C Series/Satera LBP670C Series firmware v03.09 and earlier sold in Japan.Color imageCLASS MF740C Series/Color imageCLASS MF640C Series/Color imageCLASS X MF1127C/Color imageCLASS LBP664Cdw/Color imageCLASS LBP622Cdw/Color imageCLASS X LBP1127C firmware v12.07 and earlier, and Color imageCLASS MF750C Series/Color imageCLASS X MF1333C/Color imageCLASS LBP674Cdw/Color imageCLASS X LBP1333C firmware v03.09 and earlier sold in US.i-SENSYS MF740C Series/i-SENSYS MF640C Series/C1127i Series/i-SENSYS LBP660C Series/i-SENSYS LBP620C Series/C1127P firmware v12.07 and earlier, and i-SENSYS MF750C Series/C1333i Series/i-SENSYS LBP673Cdw/C1333P firmware v03.09 and earlier sold in Europe.
problem types: CWE-787: Out-of-bounds Write
affected:
{
product: Color imageCLASS MF740C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Color imageCLASS MF640C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: i-SENSYS MF740C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: i-SENSYS MF640C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Satera MF740C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Satera MF640C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Color imageCLASS X MF1127C
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: C1127i Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Color imageCLASS LBP664Cdw
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Color imageCLASS LBP622Cdw
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: i-SENSYS LBP660C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: i-SENSYS LBP620C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Satera LBP660C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Satera LBP620C Series
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Color imageCLASS X LBP1127C
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: C1127P
vendor: Canon Inc.
versions:
status: affected, version: v12.07 and earlier
}
{
product: Color imageCLASS MF750C Series
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
{
product: i-SENSYS MF750C Series
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
{
product: Satera MF750C Series
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
{
product: Color imageCLASS X MF1333C
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
{
product: C1333i Series
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
{
product: Color imageCLASS LBP674Cdw
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
{
product: i-SENSYS LBP673Cdw
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
{
product: Satera LBP670C Series
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
{
product: Color imageCLASS X LBP1333C
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
{
product: C1333P
vendor: Canon Inc.
versions:
status: affected, version: v03.09 and earlier
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL