ZDI-CAN-25779: ZDI-25-309: (Pwn2Own) Canon imageCLASS MF656Cdw sfpcmAuthenticateSecAdmin Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published May 28, 2025

Updated

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF656Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-2146.

Affected Software

1 affected component

Canon imageCLASS MF656Cdw

Event History

May 28, 2025

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-25779?

The severity of ZDI-CAN-25779 is rated at 8.8 on the CVSS scale, indicating a high level of risk.

How do I fix ZDI-CAN-25779?

To fix ZDI-CAN-25779, update the firmware of the Canon imageCLASS MF656Cdw printer to the latest version provided by Canon.

What type of attackers can exploit ZDI-CAN-25779?

Network-adjacent attackers can exploit ZDI-CAN-25779 without the need for authentication.

What potential impact does ZDI-CAN-25779 have on affected devices?

ZDI-CAN-25779 allows attackers to execute arbitrary code on the affected installations of Canon imageCLASS MF656Cdw printers.

Which devices are affected by ZDI-CAN-25779?

ZDI-CAN-25779 affects installations of Canon imageCLASS MF656Cdw printers.