CVE-2024-12648: Buffer Overflow
Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12648?
CVE-2024-12648 has a critical severity rating due to its potential for arbitrary code execution and denial of service.
How do I fix CVE-2024-12648?
To fix CVE-2024-12648, update the firmware of the affected Canon printers to the latest version provided by Canon.
Which products are affected by CVE-2024-12648?
CVE-2024-12648 affects several Canon multifunction and laser printers including Satera MF656Cdw, Satera MF654Cdw and others running firmware v05.04 or earlier.
What could happen if CVE-2024-12648 is exploited?
If exploited, CVE-2024-12648 can cause the device to become unresponsive or allow an attacker to execute arbitrary code remotely.
Is there a workaround for CVE-2024-12648?
Currently, the best workaround for CVE-2024-12648 is to disconnect the affected printers from the network until the firmware is updated.