CVE-2025-14233: Critical severity Canon Satera LBP670C Series vulnerability
Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14233?
CVE-2025-14233 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2025-14233?
To fix CVE-2025-14233, it is recommended to update the firmware of the affected Canon printer models to the latest version available.
What devices are affected by CVE-2025-14233?
CVE-2025-14233 affects various Canon Satera, imageCLASS, and i-SENSYS printer models with firmware version 06.02 or earlier.
What type of attack can CVE-2025-14233 enable?
CVE-2025-14233 can enable an attacker on the same network segment to make the device unresponsive or execute arbitrary code.
What is the cause of CVE-2025-14233?
CVE-2025-14233 is caused by an invalid free issue in the CPCA file deletion processing.