ZDI-CAN-22403: ZDI-24-089: (Pwn2Own) Canon imageCLASS MF753Cdw CADM rmSetFileName Buffer Overflow Remote Code Execution Vulnerability

Published Feb 6, 2024

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF753Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-6229.

Affected Software

1 affected component

Canon imageCLASS MF753Cdw

Event History

Feb 6, 2024

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-22403?

ZDI-CAN-22403 has been assigned a CVSS rating of 8.8, indicating a high severity level.

How do I fix ZDI-CAN-22403?

To mitigate ZDI-CAN-22403, apply the latest firmware updates provided by Canon for the imageCLASS MF753Cdw printers.

Who is affected by ZDI-CAN-22403?

ZDI-CAN-22403 affects users of Canon imageCLASS MF753Cdw printers that have not been updated to secure versions.

Can ZDI-CAN-22403 be exploited remotely?

Yes, ZDI-CAN-22403 can be exploited by network-adjacent attackers without requiring authentication.

What type of attack does ZDI-CAN-22403 allow?

ZDI-CAN-22403 allows attackers to execute arbitrary code on the affected Canon printers.