CVE-2024-12647: Buffer Overflow
Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12647?
CVE-2024-12647 has a critical severity level due to its potential to allow remote code execution or cause the affected printers to become unresponsive.
How do I fix CVE-2024-12647?
To fix CVE-2024-12647, update the firmware of the affected Canon printers to the latest version provided by Canon.
Which products are affected by CVE-2024-12647?
CVE-2024-12647 affects various Canon printers, including the Satera MF656Cdw and MF654Cdw models with firmware version 05.04 or lower.
What kind of attack can CVE-2024-12647 enable?
CVE-2024-12647 can enable an attacker to execute arbitrary code or disrupt the functionality of the devices by exploiting a buffer overflow vulnerability.
Is CVE-2024-12647 being actively exploited?
There are indications that CVE-2024-12647 could be exploited, so immediate action is recommended to mitigate risks.