CVE-2024-0244 – A heap buffer overflow in the Canon MF753Cdw printer
ZDI details CVE-2024-0244, an unauthenticated heap overflow in the Canon MF753Cdw exploited at Pwn2Own.
48
CVE-2024-0244
- CVSS 3.1
- 9.8 critical
- EPSS
- 1%p71
- Published
- ·
- Modified
Description · NVD
Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS MF750C Series/Color imageCLASS X MF1333C firmware v03.07 and earlier sold in US. i-SENSYS MF754Cdw/C1333iF firmware v03.07 and earlier sold in Europe.
- Vendors
- canon
- Products
- i-sensys mf754cdw firmware, i-sensys x c1333if firmware, mf755cdw firmware, mf753cdw firmware, mf751cdw firmware, mf1333c firmware, lbp1333c firmware
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H