Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2023-0857

Summary
Assigner-Canon
Assigner Org ID-f98c90f0-e9bd-4fa7-911b-51993f3571fd
Published At-11 May, 2023 | 00:00
Updated At-24 Jan, 2025 | 21:10
Rejected At-
Credits

Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Canon
Assigner Org ID:f98c90f0-e9bd-4fa7-911b-51993f3571fd
Published At:11 May, 2023 | 00:00
Updated At:24 Jan, 2025 | 21:10
Rejected At:
▼CVE Numbering Authority (CNA)

Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

Affected Products
Vendor
Canon Inc.Canon Inc.
Product
Canon Office/Small Office Multifunction Printers and Laser Printers
Versions
Affected
  • Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
Problem Types
TypeCWE IDDescription
CWECWE-286CWE-286: Incorrect User Management
Type: CWE
CWE ID: CWE-286
Description: CWE-286: Incorrect User Management
Metrics
VersionBase scoreBase severityVector
3.15.9MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Version: 3.1
Base score: 5.9
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.canon-europe.com/support/product-security-latest-news/
N/A
https://psirt.canon/advisory-information/cp2023-001/
N/A
https://canon.jp/support/support-info/230414vulnerability-response
N/A
https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
N/A
Hyperlink: https://www.canon-europe.com/support/product-security-latest-news/
Resource: N/A
Hyperlink: https://psirt.canon/advisory-information/cp2023-001/
Resource: N/A
Hyperlink: https://canon.jp/support/support-info/230414vulnerability-response
Resource: N/A
Hyperlink: https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.canon-europe.com/support/product-security-latest-news/
x_transferred
https://psirt.canon/advisory-information/cp2023-001/
x_transferred
https://canon.jp/support/support-info/230414vulnerability-response
x_transferred
https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
x_transferred
Hyperlink: https://www.canon-europe.com/support/product-security-latest-news/
Resource:
x_transferred
Hyperlink: https://psirt.canon/advisory-information/cp2023-001/
Resource:
x_transferred
Hyperlink: https://canon.jp/support/support-info/230414vulnerability-response
Resource:
x_transferred
Hyperlink: https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
Resource:
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:f98c90f0-e9bd-4fa7-911b-51993f3571fd
Published At:11 May, 2023 | 13:15
Updated At:07 Nov, 2023 | 04:01

Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Secondary3.15.9MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Type: Primary
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Type: Secondary
Version: 3.1
Base score: 5.9
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CPE Matches
Canon Inc.
canon
>>mf642cdw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf642cdw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf642cdw>>-
cpe:2.3:h:canon:mf642cdw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf644cdw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf644cdw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf644cdw>>-
cpe:2.3:h:canon:mf644cdw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf741cdw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf741cdw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf741cdw>>-
cpe:2.3:h:canon:mf741cdw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf743cdw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf743cdw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf743cdw>>-
cpe:2.3:h:canon:mf743cdw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf745cdw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf745cdw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf745cdw>>-
cpe:2.3:h:canon:mf745cdw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp621c_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:lbp621c_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp621c>>-
cpe:2.3:h:canon:lbp621c:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp622c_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:lbp622c_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp622c>>-
cpe:2.3:h:canon:lbp622c:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp661c_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:lbp661c_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp661c>>-
cpe:2.3:h:canon:lbp661c:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp662c_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:lbp662c_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp662c>>-
cpe:2.3:h:canon:lbp662c:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp664c_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:lbp664c_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp664c>>-
cpe:2.3:h:canon:lbp664c:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf1127c_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf1127c_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf1127c>>-
cpe:2.3:h:canon:mf1127c:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf262dw_ii_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf262dw_ii_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf262dw_ii>>-
cpe:2.3:h:canon:mf262dw_ii:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf264dw_ii_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf264dw_ii_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf264dw_ii>>-
cpe:2.3:h:canon:mf264dw_ii:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf267dw_ii_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf267dw_ii_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf267dw_ii>>-
cpe:2.3:h:canon:mf267dw_ii:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf269dw_ii_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf269dw_ii_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf269dw_ii>>-
cpe:2.3:h:canon:mf269dw_ii:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf269dw_vp_ii_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf269dw_vp_ii_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf269dw_vp_ii>>-
cpe:2.3:h:canon:mf269dw_vp_ii:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf272dw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf272dw>>-
cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf273dw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf273dw>>-
cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf275dw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf275dw>>-
cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf641cw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf641cw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf641cw>>-
cpe:2.3:h:canon:mf641cw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf746cdw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:mf746cdw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>mf746cdw>>-
cpe:2.3:h:canon:mf746cdw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp122dw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp122dw>>-
cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp1127c_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:lbp1127c_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp1127c>>-
cpe:2.3:h:canon:lbp1127c:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp622cdw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:lbp622cdw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp622cdw>>-
cpe:2.3:h:canon:lbp622cdw:-:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp623cdw_firmware>>Versions up to 11.04(inclusive)
cpe:2.3:o:canon:lbp623cdw_firmware:*:*:*:*:*:*:*:*
Canon Inc.
canon
>>lbp623cdw>>-
cpe:2.3:h:canon:lbp623cdw:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-OtherPrimarynvd@nist.gov
CWE-286Secondaryf98c90f0-e9bd-4fa7-911b-51993f3571fd
CWE ID: NVD-CWE-Other
Type: Primary
Source: nvd@nist.gov
CWE ID: CWE-286
Type: Secondary
Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://canon.jp/support/support-info/230414vulnerability-responsef98c90f0-e9bd-4fa7-911b-51993f3571fd
N/A
https://psirt.canon/advisory-information/cp2023-001/f98c90f0-e9bd-4fa7-911b-51993f3571fd
N/A
https://www.canon-europe.com/support/product-security-latest-news/f98c90f0-e9bd-4fa7-911b-51993f3571fd
N/A
https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflowf98c90f0-e9bd-4fa7-911b-51993f3571fd
N/A
Hyperlink: https://canon.jp/support/support-info/230414vulnerability-response
Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
Resource: N/A
Hyperlink: https://psirt.canon/advisory-information/cp2023-001/
Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
Resource: N/A
Hyperlink: https://www.canon-europe.com/support/product-security-latest-news/
Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
Resource: N/A
Hyperlink: https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

0Records found
Details not found