CVE-2025-2146: Buffer Overflow

Published May 25, 2025
·
Updated

Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw/Satera MF551dw/Satera MF457dw firmware v05.07 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw/imageCLASS MF455dw/imageCLASS MF453dw/imageCLASS MF452dw/imageCLASS MF451dw/imageCLASS LBP237dw/imageCLASS LBP236dw/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II/imageCLASS X LBP1238 II firmware v05.07 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw/i-SENSYS MF553dw/i-SENSYS MF552dw/i-SENSYS MF455dw/i-SENSYS MF453dw/i-SENSYS LBP236dw/i-SENSYS LBP233dw/imageRUNNER 1643iF II/imageRUNNER 1643i II/i-SENSYS X 1238iF II/i-SENSYS X 1238i II/i-SENSYS X 1238P II/i-SENSYS X 1238Pr II firmware v05.07 and earlier sold in Europe.

Affected Software

111 affected components
Canon Satera Mf656cdw<=v05.07
Canon Satera MF654Cdw<=v05.07
Canon Satera MF551dw<=v05.07
Canon Satera MF457dw<=v05.07
Canon Color imageCLASS MF656Cdw<=v05.07
Canon Color imageCLASS MF654Cdw<=v05.07
Canon Color imageCLASS MF653Cdw<=v05.07
Canon Color imageCLASS MF652Cdw<=v05.07
Canon Color imageCLASS LBP633Cdw<=v05.07
Canon Color imageCLASS LBP632Cdw<=v05.07
Canon imageCLASS MF455dw<=v05.07
Canon imageCLASS MF453dw<=v05.07
Canon imageCLASS MF452dw<=v05.07
Canon imageCLASS MF451dw<=v05.07
Canon Imageclass Lbp237dw<=v05.07
Canon imageCLASS LBP236dw<=v05.07
Canon X MF1238 II<=v05.07
Canon imageCLASS X MF1643i II<=v05.07
Canon imageCLASS X MF1643iF II<=v05.07
Canon imageCLASS X LBP1238 II<=v05.07
Canon i-SENSYS MF657Cdw<=v05.07
Canon i-SENSYS MF655Cdw<=v05.07
Canon i-SENSYS MF651Cdw<=v05.07
Canon i-SENSYS LBP633Cdw<=v05.07
Canon i-SENSYS LBP631Cdw<=v05.07
Canon i-SENSYS MF553dw<=v05.07
Canon I-sensys Mf552dw<=v05.07
Canon i-SENSYS MF455dw<=v05.07
Canon i-SENSYS MF453dw<=v05.07
Canon I-sensys Lbp236dw<=v05.07
Canon I-sensys Lbp233dw<=v05.07
Canon Imagerunner 1643if Ii<=v05.07
Canon Imagerunner 1643i Ii<=v05.07
Canon I-sensys X 1238if Ii<=v05.07
Canon i-SENSYS X 1238i II<=v05.07
Canon i-SENSYS X 1238P II<=v05.07
Canon I-sensys X 1238pr Ii<=v05.07
All of the following
Canon Satera Mf656cdw Firmware<=05.07
Canon Satera Mf656cdw
All of the following
Canon Satera Mf654cdw Firmware<=05.07
Canon Satera MF654Cdw
All of the following
Canon Satera Mf551dw Firmware<=05.07
Canon Satera MF551dw
All of the following
Canon Satera Mf457dw Firmware<=05.07
Canon Satera MF457dw
All of the following
Canon Imageclass Mf656cdw Firmware<=05.07
Canon imageCLASS MF656Cdw
All of the following
Canon Imageclass Mf654cdw Firmware<=05.07
Canon imageCLASS MF654Cdw
All of the following
Canon Imageclass Mf653cdw Firmware<=05.07
Canon Imageclass Mf653cdw
All of the following
Canon Imageclass Mf652cdw Firmware<=05.07
Canon Imageclass Mf652cdw
All of the following
Canon Imageclass Lbp633cdw Firmware<=05.07
Canon Imageclass Lbp633cdw
All of the following
Canon Imageclass Lbp632cdw Firmware<=05.07
Canon Imageclass Lbp632cdw
All of the following
Canon Imageclass Mf455dw Firmware<=05.07
Canon imageCLASS MF455dw
All of the following
Canon Imageclass Mf453dw Firmware<=05.07
Canon imageCLASS MF453dw
All of the following
Canon Imageclass Mf452dw Firmware<=05.07
Canon imageCLASS MF452dw
All of the following
Canon Imageclass Mf451dw Firmware<=05.07
Canon imageCLASS MF451dw
All of the following
Canon Imageclass Lbp237dw Firmware<=05.07
Canon Imageclass Lbp237dw
All of the following
Canon Imageclass Lbp236dw Firmware<=05.07
Canon imageCLASS LBP236dw
All of the following
Canon Imageclass X Mf1238 Ii Firmware<=05.07
Canon Imageclass X Mf1238 Ii
All of the following
Canon Imageclass X Mf1643i Ii Firmware<=05.07
Canon imageCLASS X MF1643i II
All of the following
Canon Imageclass X Mf1643if Ii Firmware<=05.07
Canon imageCLASS X MF1643iF II
All of the following
Canon Imageclass X Lbp1238 Ii Firmware<=05.07
Canon imageCLASS X LBP1238 II
All of the following
Canon I-sensys Mf657cdw Firmware<=05.07
Canon i-SENSYS MF657Cdw
All of the following
Canon I-sensys Mf655cdw Firmware<=05.07
Canon i-SENSYS MF655Cdw
All of the following
Canon I-sensys Mf651cdw Firmware<=05.07
Canon i-SENSYS MF651Cdw
All of the following
Canon I-sensys Lbp633cdw Firmware<=05.07
Canon i-SENSYS LBP633Cdw
All of the following
Canon I-sensys Lbp631cdw Firmware<=05.07
Canon i-SENSYS LBP631Cdw
All of the following
Canon I-sensys Mf553dw Firmware<=05.07
Canon i-SENSYS MF553dw
All of the following
Canon I-sensys Mf552dw Firmware<=05.07
Canon I-sensys Mf552dw
All of the following
Canon I-sensys Mf455dw Firmware<=05.07
Canon i-SENSYS MF455dw
All of the following
Canon I-sensys Mf453dw Firmware<=05.07
Canon i-SENSYS MF453dw
All of the following
Canon I-sensys Lbp236dw Firmware<=05.07
Canon I-sensys Lbp236dw
All of the following
Canon I-sensys Lbp233dw Firmware<=05.07
Canon I-sensys Lbp233dw
All of the following
Canon Imagerunner 1643if Ii Firmware<=05.07
Canon Imagerunner 1643if Ii
All of the following
Canon Imagerunner 1643i Ii Firmware<=05.07
Canon Imagerunner 1643i Ii
All of the following
Canon I-sensys X 1238if Ii Firmware<=05.07
Canon I-sensys X 1238if Ii
All of the following
Canon I-sensys X 1238i Ii Firmware<=05.07
Canon i-SENSYS X 1238i II
All of the following
Canon I-sensys X 1238p Ii Firmware<=05.07
Canon i-SENSYS X 1238P II
All of the following
Canon I-sensys X 1238pr Ii Firmware<=05.07
Canon I-sensys X 1238pr Ii

Event History

May 25, 2025
CVE Published
via MITRE·11:36 PM
Data Sourced
via MITRE·11:36 PM
DescriptionSeverityWeakness
May 26, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2025-2146?

CVE-2025-2146 is a high-severity vulnerability due to its potential for buffer overflow leading to device unresponsiveness or arbitrary code execution.

2

How do I fix CVE-2025-2146?

To fix CVE-2025-2146, update your affected Canon printer firmware to the latest version available.

3

Which Canon products are affected by CVE-2025-2146?

CVE-2025-2146 affects multiple Canon Satera and Color imageCLASS multifunction printers, including models like MF656Cdw and MF654Cdw.

4

What can an attacker potentially do with CVE-2025-2146?

An attacker exploiting CVE-2025-2146 can cause the affected printer to become unresponsive or execute arbitrary code on the device.

5

Is there a known workaround for CVE-2025-2146?

Currently, the recommended solution for CVE-2025-2146 is to apply the firmware updates provided by Canon.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203