Vulnerability-Lookup

CVE-2024-12648 (GCVE-0-2024-12648)

Vulnerability from cvelistv5 – Published: 2025-01-28 00:39 – Updated: 2025-01-28 15:17

Summary

Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

Canon

References

URL

Tags

	https://psirt.canon/advisory-information/cp2025-001/	vendor-advisory
	https://canon.jp/support/support-info/250127vulne…	vendor-advisory
	https://www.usa.canon.com/support/canon-product-a…	vendor-advisory
	https://www.canon-europe.com/support/product-secu…	vendor-advisory

Impacted products

Vendor

Product

Version

Canon Inc.

Satera MF656Cdw

Affected: 05.04 and earlier

Canon Inc.	Satera MF654Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS MF656Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS MF654Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS MF653Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS MF652Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS LBP633Cdw	Affected: 05.04 and earlier
Canon Inc.	Color imageCLASS LBP632Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS MF657Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS MF655Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS MF651Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS LBP633Cdw	Affected: 05.04 and earlier
Canon Inc.	i-SENSYS LBP631Cdw	Affected: 05.04 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-12648",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T14:55:50.324601Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-28T15:17:30.024Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Satera MF656Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Satera MF654Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF656Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF654Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF653Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF652Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP633Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP632Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF657Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF655Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF651Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP633Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP631Cdw",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "05.04 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eBuffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \u003c/p\u003e"
            }
          ],
          "value": "Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-28T00:39:15.098Z",
        "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "shortName": "Canon"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.canon/advisory-information/cp2025-001/"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://canon.jp/support/support-info/250127vulnerability-response"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.canon-europe.com/support/product-security/#news"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
    "assignerShortName": "Canon",
    "cveId": "CVE-2024-12648",
    "datePublished": "2025-01-28T00:39:15.098Z",
    "dateReserved": "2024-12-16T02:41:59.461Z",
    "dateUpdated": "2025-01-28T15:17:30.024Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-12648\",\"sourceIdentifier\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"published\":\"2025-01-28T01:15:08.700\",\"lastModified\":\"2026-01-26T15:08:11.990\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de b\u00fafer en el procesamiento de etiquetas EXIF ??de datos TIFF de impresoras multifunci\u00f3n para peque\u00f1as oficinas e impresoras l\u00e1ser (*) que puede permitir que un atacante en el segmento de red provoque que el producto afectado deje de responder o ejecute c\u00f3digo arbitrario. *: Firmware v05.04 y anteriores de Satera MF656Cdw/Satera MF654Cdw vendido en Jap\u00f3n. Firmware v05.04 y anteriores de Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw vendido en EE. UU. Firmware v05.04 y anteriores de i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw vendidos en Europa.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"57F593A2-44BE-4090-BBE6-953134D0D1E2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"376C5E10-0D6C-405D-BC63-BDE7257A8142\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"309D151A-B0A5-4B01-A54B-1C91BC45F170\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"020E1E4D-4055-446C-A403-544F50236262\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"E1D56787-194E-4E84-A321-500C114E6895\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C814016-6D9B-483D-9C29-95E4624C6CA4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"987055F8-7E20-4B8F-B1C4-7732E888B28A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"700050B9-DA11-4D63-A3DB-D6924DD7F3DF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf465dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"E0316629-B0C6-4477-8DE6-844F13EC28DF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf465dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB632D61-FFEE-4ED0-8F33-A8404919E4D6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf462dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"8CE9592C-EC74-4180-8B4A-A639F8AB5FC2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf462dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E4371D9-CC0B-431C-A04D-62B252ACD549\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf656cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"A808FD8C-2E1E-4050-BA9C-78CFD61E196B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf656cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4A3D591-82ED-42C4-B724-EDFA5E196066\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf654cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"2AA6EBC3-71A0-4467-B3EA-355425B0EF15\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf654cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"396973A5-0427-460C-A268-F44DE2E54C29\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf653cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"F3B935E6-C5C1-4BD3-B80D-4FABEDF3AB67\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf653cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31A2712C-6508-4DA4-B1EE-4A665063D9E8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf652cw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"1B128468-BB29-4E9D-B06E-744158D36D2C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf652cw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"976A3093-D510-4046-BB49-70187FBC8505\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"54BF39D0-5BB4-4F2E-B435-D74DEB24CD92\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1440_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"DFB65847-A3D0-48F8-8A18-653759F669CC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1440:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B544E39-2001-49BD-BC5A-3E21BCF50F8E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"9FC20747-28E3-4A25-9838-0D936C25D4FF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"264748B9-82FD-466C-894B-232305D930E4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"9BDB4157-4AC9-4A59-AC7C-CFA1B4D6D4A7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60EF8B7A-8184-469E-AB2B-C13C24E4F01C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"A5ADFB3E-D870-43D7-916F-E820E88B91B4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3406797E-EE0A-419B-862D-DBD8B505CCF6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"A018BC1D-1DF8-479B-91D8-820828B40447\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4077161-199F-44A0-AE33-BC999E06B8E6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp247dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"844474A9-3503-4A6B-8A0D-56E85EF021D1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp247dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"123F28F0-1509-42A8-A702-F6378E61375C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp246dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"5B7CD3E1-F2F8-4824-86E8-7693E7EED309\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp246dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B10A84C6-1C16-46BF-8056-C516BCD3A128\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp633cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"ED93AF90-6AAC-437C-B941-65B18A36F19A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp633cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E319965-0012-44F0-92A1-481BACA5C140\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp632cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"1ED64209-5508-42D7-BC33-7E1A4A753BCD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp632cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96F1019F-0C13-4FCD-B9C1-7B58D7080953\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"66A3432D-CD0D-4481-B73C-DCDFA073D4E5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp1440_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"05.04\",\"matchCriteriaId\":\"2FA22DE5-D496-4ABE-B75D-6A8A84660B5F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp1440:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8494F2A5-E30B-4203-9325-A9DA158276D9\"}]}]}],\"references\":[{\"url\":\"https://canon.jp/support/support-info/250127vulnerability-response\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://psirt.canon/advisory-information/cp2025-001/\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.canon-europe.com/support/product-security/#news\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-12648\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-01-28T14:55:50.324601Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-01-28T14:47:22.143Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Canon Inc.\", \"product\": \"Satera MF656Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Satera MF654Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF656Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF654Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF653Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS MF652Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS LBP633Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"Color imageCLASS LBP632Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS MF657Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS MF655Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS MF651Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS LBP633Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}, {\"vendor\": \"Canon Inc.\", \"product\": \"i-SENSYS LBP631Cdw\", \"versions\": [{\"status\": \"affected\", \"version\": \"05.04 and earlier\"}]}], \"references\": [{\"url\": \"https://psirt.canon/advisory-information/cp2025-001/\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://canon.jp/support/support-info/250127vulnerability-response\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.canon-europe.com/support/product-security/#news\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eBuffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787: Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"f98c90f0-e9bd-4fa7-911b-51993f3571fd\", \"shortName\": \"Canon\", \"dateUpdated\": \"2025-01-28T00:39:15.098Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-12648\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-01-28T15:17:30.024Z\", \"dateReserved\": \"2024-12-16T02:41:59.461Z\", \"assignerOrgId\": \"f98c90f0-e9bd-4fa7-911b-51993f3571fd\", \"datePublished\": \"2025-01-28T00:39:15.098Z\", \"assignerShortName\": \"Canon\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

GHSA-9CWQ-G8XG-JGRG

Vulnerability from github – Published: 2025-01-28 03:31 – Updated: 2025-01-28 03:31

Details

Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Severity ?

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-12648"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-01-28T01:15:08Z",
    "severity": "CRITICAL"
  },
  "details": "Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.",
  "id": "GHSA-9cwq-g8xg-jgrg",
  "modified": "2025-01-28T03:31:13Z",
  "published": "2025-01-28T03:31:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12648"
    },
    {
      "type": "WEB",
      "url": "https://canon.jp/support/support-info/250127vulnerability-response"
    },
    {
      "type": "WEB",
      "url": "https://psirt.canon/advisory-information/cp2025-001"
    },
    {
      "type": "WEB",
      "url": "https://www.canon-europe.com/support/product-security/#news"
    },
    {
      "type": "WEB",
      "url": "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

FKIE_CVE-2024-12648

Vulnerability from fkie_nvd - Published: 2025-01-28 01:15 - Updated: 2025-01-28 01:15

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://canon.jp/support/support-info/250127vulnerability-response
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://psirt.canon/advisory-information/cp2025-001/
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.canon-europe.com/support/product-security/#news
	f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer en el procesamiento de etiquetas EXIF ??de datos TIFF de impresoras multifunci\u00f3n para peque\u00f1as oficinas e impresoras l\u00e1ser (*) que puede permitir que un atacante en el segmento de red provoque que el producto afectado deje de responder o ejecute c\u00f3digo arbitrario. *: Firmware v05.04 y anteriores de Satera MF656Cdw/Satera MF654Cdw vendido en Jap\u00f3n. Firmware v05.04 y anteriores de Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw vendido en EE. UU. Firmware v05.04 y anteriores de i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw vendidos en Europa."
    }
  ],
  "id": "CVE-2024-12648",
  "lastModified": "2025-01-28T01:15:08.700",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-01-28T01:15:08.700",
  "references": [
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "url": "https://canon.jp/support/support-info/250127vulnerability-response"
    },
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "url": "https://psirt.canon/advisory-information/cp2025-001/"
    },
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "url": "https://www.canon-europe.com/support/product-security/#news"
    },
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "url": "https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers"
    }
  ],
  "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
  "vulnStatus": "Undergoing Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "type": "Secondary"
    }
  ]
}

JVNDB-2025-001238

Vulnerability from jvndb - Published: 2025-01-29 13:41 - Updated:2025-05-27 16:06

Severity ?

9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers

Details

Office/Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple out-of-bounds write vulnerabilities (CWE-787, CVE-2024-12647, CVE-2024-12648, CVE-2024-12649, CVE-2025-2146). Canon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.

References

Type

URL

	JVN	https://jvn.jp/en/vu/JVNVU93455283/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-12647
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-12648
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-12649
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-2146
	Out-of-bounds Write(CWE-787)	https://cwe.mitre.org/data/definitions/787.html

Impacted products

Vendor

Product

Canon

(multiple product)

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001238.html",
  "dc:date": "2025-05-27T16:06+09:00",
  "dcterms:issued": "2025-01-29T13:41+09:00",
  "dcterms:modified": "2025-05-27T16:06+09:00",
  "description": "Office/Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple out-of-bounds write vulnerabilities (CWE-787, CVE-2024-12647, CVE-2024-12648, CVE-2024-12649, CVE-2025-2146).\r\n\r\nCanon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-001238.html",
  "sec:cpe": {
    "#text": "cpe:/a:canon:multiple_product",
    "@product": "(multiple product)",
    "@vendor": "Canon",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "9.8",
    "@severity": "Critical",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2025-001238",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU93455283/index.html",
      "@id": "JVNVU#93455283",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-12647",
      "@id": "CVE-2024-12647",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-12648",
      "@id": "CVE-2024-12648",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-12649",
      "@id": "CVE-2024-12649",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-2146",
      "@id": "CVE-2025-2146",
      "@source": "CVE"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/787.html",
      "@id": "CWE-787",
      "@title": "Out-of-bounds Write(CWE-787)"
    }
  ],
  "title": "Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-12648 (GCVE-0-2024-12648)

GHSA-9CWQ-G8XG-JGRG

FKIE_CVE-2024-12648

JVNDB-2025-001238

Tags

Sightings

Nomenclature