Canon imageCLASS MF743Cdw 远程代码执行漏洞(CVE-2023-0854)
CVE编号
CVE-2023-0854利用情况
暂无补丁情况
N/A披露时间
2023-05-05漏洞描述
此漏洞允许网络相邻攻击者在受影响的 Canon imageCLASS MF743Cdw 打印机安装上执行任意代码。利用此漏洞不需要身份验证。 特定缺陷存在于 NetBIOS 名称的解析中。该问题是由于在将用户提供的数据复制到固定长度的基于堆的缓冲区之前，没有对用户提供的数据的长度进行适当的验证。攻击者可以利用此漏洞在 NetBIOS-NS 服务的上下文中执行代码。解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_lbp621cw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_lbp623cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_lbp633cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_lbp664cx_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_mf641cw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_mf643cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_mf645cx_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_mf742cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_mf744cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_mf746cx_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_x_c1127if_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_x_c1127i_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | i-sensys_x_c1127p_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | imageprograf_tc-20m_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | imageprograf_tc-20_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp1127c_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp122dw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp621c_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp622cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp622c_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp623cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp661c_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp662c_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp664cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | lbp664c_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | maxify_gx3020_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | maxify_gx4020_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf1127c_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf262dw_ii_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf264dw_ii_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf267dw_ii_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf269dw_ii_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf269dw_vp_ii_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf272dw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf273dw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf275dw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf641cw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf642cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf644cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf741cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf743cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf745cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | mf746cdw_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | pixma_g3270_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | canon | pixma_g4270_firmware | * | Up to (including) 11.04 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_lbp621cw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_lbp623cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_lbp633cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_lbp664cx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_mf641cw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_mf643cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_mf645cx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_mf742cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_mf744cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_mf746cx | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_x_c1127i | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_x_c1127if | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | i-sensys_x_c1127p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | imageprograf_tc-20 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | imageprograf_tc-20m | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp1127c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp122dw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp621c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp622c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp622cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp623cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp661c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp662c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp664c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | lbp664cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | maxify_gx3020 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | maxify_gx4020 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf1127c | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf262dw_ii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf264dw_ii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf267dw_ii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf269dw_ii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf269dw_vp_ii | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf272dw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf273dw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf275dw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf641cw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf642cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf644cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf741cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf743cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf745cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | mf746cdw | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | pixma_g3270 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | canon | pixma_g4270 | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
| CWE-ID | 漏洞类型 |
| CWE-787 | 跨界内存写 |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论