CVE-2024-2184

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may…

Critical9.8EPSS 0.81%

Published: 11 Mar 2024
Updated: 28 Aug 2024
Reserved: 5 Mar 2024
Assigned by: Canon

Description

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF740C Series/Satera MF640C Series/Satera LBP660C Series/Satera LBP620C Series firmware v12.07 and earlier, and Satera MF750C Series/Satera LBP670C Series firmware v03.09 and earlier sold in Japan.Color imageCLASS MF740C Series/Color imageCLASS MF640C Series/Color imageCLASS X MF1127C/Color imageCLASS LBP664Cdw/Color imageCLASS LBP622Cdw/Color imageCLASS X LBP1127C firmware v12.07 and earlier, and Color imageCLASS MF750C Series/Color imageCLASS X MF1333C/Color imageCLASS LBP674Cdw/Color imageCLASS X LBP1333C firmware v03.09 and earlier sold in US.i-SENSYS MF740C Series/i-SENSYS MF640C Series/C1127i Series/i-SENSYS LBP660C Series/i-SENSYS LBP620C Series/C1127P firmware v12.07 and earlier, and i-SENSYS MF750C Series/C1333i Series/i-SENSYS LBP673Cdw/C1333P firmware v03.09 and earlier sold in Europe.

Scores

CVSS scores of CVE-2024-2184, by who scored it
Scored by	CVSS	Score	Vector
CanonCNA (assigner)	3.1	Critical9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Deferred	3.1	Critical9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.81% · top 43% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: yes · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

CWE-787: Out-of-bounds Write (opens in a new tab)All about CWE-787 and its CVEs

Affected products

Canon Inc. · Color imageCLASS MF740C Series
- affected v12.07 and earlier
Canon Inc. · Color imageCLASS MF640C Series
- affected v12.07 and earlier
Canon Inc. · i-SENSYS MF740C Series
- affected v12.07 and earlier
Canon Inc. · i-SENSYS MF640C Series
- affected v12.07 and earlier
Canon Inc. · Satera MF740C Series
- affected v12.07 and earlier
Canon Inc. · Satera MF640C Series
- affected v12.07 and earlier
Canon Inc. · Color imageCLASS X MF1127C
- affected v12.07 and earlier
Canon Inc. · C1127i Series
- affected v12.07 and earlier
Canon Inc. · Color imageCLASS LBP664Cdw
- affected v12.07 and earlier
Canon Inc. · Color imageCLASS LBP622Cdw
- affected v12.07 and earlier
Canon Inc. · i-SENSYS LBP660C Series
- affected v12.07 and earlier
Canon Inc. · i-SENSYS LBP620C Series
- affected v12.07 and earlier
Canon Inc. · Satera LBP660C Series
- affected v12.07 and earlier
Canon Inc. · Satera LBP620C Series
- affected v12.07 and earlier
Canon Inc. · Color imageCLASS X LBP1127C
- affected v12.07 and earlier
Canon Inc. · C1127P
- affected v12.07 and earlier
Canon Inc. · Color imageCLASS MF750C Series
- affected v03.09 and earlier
Canon Inc. · i-SENSYS MF750C Series
- affected v03.09 and earlier
Canon Inc. · Satera MF750C Series
- affected v03.09 and earlier
Canon Inc. · Color imageCLASS X MF1333C
- affected v03.09 and earlier
Canon Inc. · C1333i Series
- affected v03.09 and earlier
Canon Inc. · Color imageCLASS LBP674Cdw
- affected v03.09 and earlier
Canon Inc. · i-SENSYS LBP673Cdw
- affected v03.09 and earlier
Canon Inc. · Satera LBP670C Series
- affected v03.09 and earlier
Canon Inc. · Color imageCLASS X LBP1333C
- affected v03.09 and earlier
Canon Inc. · C1333P
- affected v03.09 and earlier

References (1)

https://psirt.canon/advisory-information/cp2024-002/ (opens in a new tab)vendor-advisoryx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2024-2184](https://trackcve.app/badge/CVE-2024-2184.svg)](https://trackcve.app/cve/CVE-2024-2184)

Record last updated 28 Aug 2024, 20:24 UTC.