CVE-2024-2184: canon inc. c1127i series Out-of-bounds Write

Vulnerability summary

CVE-2024-2184 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in canon inc. c1127i series. EPSS estimates a 0.81% chance of exploitation in the next 30 days, higher than 56.3% of scored vulnerabilities.

Timeline

1. 11-03-2024
   PublishedVulnerability first disclosed.
2. 28-08-2024
   Last modifiedVulnerability information updated.

Description

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF740C Series/Satera MF640C Series/Satera LBP660C Series/Satera LBP620C Series firmware v12.07 and earlier, and Satera MF750C Series/Satera LBP670C Series firmware v03.09 and earlier sold in Japan.Color imageCLASS MF740C Series/Color imageCLASS MF640C Series/Color imageCLASS X MF1127C/Color imageCLASS LBP664Cdw/Color imageCLASS LBP622Cdw/Color imageCLASS X LBP1127C firmware v12.07 and earlier, and Color imageCLASS MF750C Series/Color imageCLASS X MF1333C/Color imageCLASS LBP674Cdw/Color imageCLASS X LBP1333C firmware v03.09 and earlier sold in US.i-SENSYS MF740C Series/i-SENSYS MF640C Series/C1127i Series/i-SENSYS LBP660C Series/i-SENSYS LBP620C Series/C1127P firmware v12.07 and earlier, and i-SENSYS MF750C Series/C1333i Series/i-SENSYS LBP673Cdw/C1333P firmware v03.09 and earlier sold in Europe.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.