CVE-2022-24672: (Pwn2Own) Canon imageCLASS MF644Cdw CADM Heap-based Buffer Overflow Remote Code Execution Vulnerability

First published: Tue Mar 28 2023(Updated: )

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15802.

Credit: zdi-disclosures@trendmicro.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/references
• agent/type
• agent/severity
• agent/author
• agent/title
• agent/description
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/first-publish-date
• collector/zdi-advisory
• source/ZDI
• alias/ZDI-22-514
• alias/ZDI-CAN-15802
• alias/CVE-2022-24672
• agent/software-canonical-lookup
• agent/event
• agent/trending
• agent/source
• agent/softwarecombine
• agent/tags
• collector/nvd-index
• agent/software-canonical-lookup-request
• vendor/canon
• canonical/canon imageclass mf644cdw
• canonical/canon d1620 firmware
• canonical/canon eos 77d firmware
• canonical/canon d1650 firmware
• canonical/canon d1520 firmware
• canonical/canon d1550 firmware
• canonical/canon mf1127c firmware
• canonical/canon mf1238 ii firmware
• canonical/canon mf1238 ii
• canonical/canon mf1643i ii firmware
• canonical/canon mf1643if ii firmware
• canonical/canon mf414dw firmware
• canonical/canon mf416dw firmware
• canonical/canon mf416dw
• canonical/canon mf419dw firmware
• canonical/canon mf515dw firmware
• canonical/canon mf424dw
• canonical/canon mf424dw firmware
• canonical/canon mf426dw firmware
• canonical/canon mf429dw firmware
• canonical/canon mf525dw firmware
• canonical/canon mf445dw firmware
• canonical/canon mf448dw
• canonical/canon mf448dw firmware
• canonical/canon mf449dw
• canonical/canon mf449dw firmware
• canonical/canon mf543dw
• canonical/canon mf543dw firmware
• canonical/canon mf451dw firmware
• canonical/canon mf452dw
• canonical/canon mf452dw firmware
• canonical/canon mf453dw firmware
• canonical/canon mf455dw firmware
• canonical/canon mf6160dw firmware
• canonical/canon mf6180dw firmware
• canonical/canon mf624cdw firmware
• canonical/canon mf628cdw firmware
• canonical/canon mf632cdw
• canonical/canon mf632cdw firmware
• canonical/canon mf634cdw
• canonical/canon mf634cdw firmware
• canonical/canon mf641cw firmware
• canonical/canon mf642cdw
• canonical/canon mf642cdw firmware
• canonical/canon mf644cdw firmware
• canonical/canon mf726cdw firmware
• canonical/canon mf726cdw
• canonical/canon mf729cdw firmware
• canonical/canon mf731cdw firmware
• canonical/canon mf731cdw
• canonical/canon mf733cdw firmware
• canonical/canon mf735cdw firmware
• canonical/canon mf735cdw
• canonical/canon mf741cdw firmware
• canonical/canon mf741cdw
• canonical/canon mf743cdw firmware
• canonical/canon mf745cdw firmware
• canonical/canon mf746cdw
• canonical/canon mf810cdn firmware
• canonical/canon mf820cdn firmware
• canonical/canon mf8280cw firmware
• canonical/canon mf8580cdw firmware
• canonical/canon lbp1127c
• canonical/canon lbp1238 firmware
• canonical/canon lbp1238 ii
• canonical/canon lbp1238 ii firmware
• canonical/canon lbp214dw firmware
• canonical/canon lbp215dw firmware
• canonical/canon lbp226dw firmware
• canonical/canon lbp227dw firmware
• canonical/canon lbp228dw
• canonical/canon lbp228dw firmware
• canonical/canon lbp236dw
• canonical/canon lbp237dw
• canonical/canon lbp251dw firmware
• canonical/canon lbp253dw firmware
• canonical/canon lbp612cdw
• canonical/canon lbp622cdw
• canonical/canon color imageclass lbp622cdw
• canonical/canon lbp623cdw firmware
• canonical/canon lbp654cdw firmware
• canonical/canon lbp664cdw firmware
• canonical/canon imagerunner 1435i firmware
• canonical/canon ir1435i firmware
• canonical/canon 1435if+
• canonical/canon 1435if firmware
• canonical/canon 1435p+ firmware
• canonical/canon 1435p+
• canonical/canon 1435i+ firmware
• canonical/canon 1435i+
• canonical/canon 1435if+ firmware
• canonical/canon imagerunner ir 1643i firmware
• canonical/canon ir1643i firmware
• canonical/canon imagerunner ir 1643if firmware
• canonical/canon ir1643if firmware
• canonical/canon wg7240
• canonical/canon wg7250 firmware
• canonical/canon wg7250f firmware
• canonical/canon wg7250z firmware