CVE-2023-0858 Auth bypass in Canon Office/Small Office Multifunction Printers and Laser Printers
An attacker on the network can bypass authentication to gain unauthorized access to Canon multifunction printers and laser printers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-0858?
CVE-2023-0858 is a low-severity authentication bypass vulnerability in Canon Office/Small Office Multifunction Printers and Laser Printers, published on 11 May 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
Which versions are affected by CVE-2023-0858?
It affects 45 products.
Products include Canon I-Sensys Lbp621cw Firmware, Canon I-Sensys Lbp623cdw Firmware, Canon I-Sensys Lbp633cdw Firmware, Canon I-Sensys Lbp664cx Firmware, Canon I-Sensys Mf641cw Firmware, Canon I-Sensys Mf643cdw Firmware and 39 more.
How do I fix CVE-2023-0858?
No fix has been published for CVE-2023-0858 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-0858 being exploited?
There is no known exploitation of CVE-2023-0858 in the wild and no public exploit code.
Other vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0851 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0852 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0853 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0854 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0855 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
Sources
Also known as GHSA-fg53-q2jq-9xxq.