CVEvulnerability

CVE-2022-24672

8.8 HIGH Published 2023-03-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-122, CWE-787

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15802.

Affected configurations

• canon d1620 firmware • canon d1650 firmware • canon d1520 firmware • canon d1550 firmware • canon mf1127c firmware • canon mf1238 firmware • canon mf1238 ii firmware • canon mf1643i ii firmware • canon mf1643if ii firmware • canon mf414dw firmware • canon mf416dw firmware • canon mf419dw firmware • canon mf515dw firmware • canon mf424dw firmware • canon mf426dw firmware • canon mf429dw firmware • canon mf525dw firmware • canon mf445dw firmware • canon mf448dw firmware • canon mf449dw firmware • canon mf543dw firmware • canon mf451dw firmware • canon mf452dw firmware • canon mf453dw firmware • canon mf455dw firmware • canon mf6160dw firmware • canon mf6180dw firmware • canon mf624cdw firmware • canon mf628cdw firmware • canon mf632cdw firmware • canon mf634cdw firmware • canon mf641cw firmware • canon mf642cdw firmware • canon mf644cdw firmware • canon mf726cdw firmware • canon mf729cdw firmware • canon mf731cdw firmware • canon mf733cdw firmware • canon mf735cdw firmware • canon mf741cdw firmware • canon mf743cdw firmware • canon mf745cdw firmware • canon mf746cdw firmware • canon mf810cdn firmware • canon mf820cdn firmware • canon mf8280cw firmware • canon mf8580cdw firmware • canon lbp1127c firmware • canon lbp1238 firmware • canon lbp1238 ii firmware • canon lbp214dw firmware • canon lbp215dw firmware • canon lbp226dw firmware • canon lbp227dw firmware • canon lbp228dw firmware • canon lbp236dw firmware • canon lbp237dw firmware • canon lbp251dw firmware • canon lbp253dw firmware • canon lbp612cdw firmware … and 16 more

Related

Weakness · CWE (2)

  • CWE-122 Heap-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References