CVE-2024-12648

Katalog CVE

CVSS 9.8 · Critical EPSS 1,2%

Kerentanan Out-of-bounds Write pada canon mf455dw firmware, canon mf453dw firmware +20 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut CNA.

Deskripsi (NVD)

Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Rincian

Terbit di NVD

28 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://canon.jp/support/support-info/250127vulnerability-response advisory vendor
• https://psirt.canon/advisory-information/cp2025-001/ advisory vendor
• https://www.canon-europe.com/support/product-security/#news advisory vendor
• https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-agai... advisory vendor