CVE-2023-0852
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office...
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
- Record
CVE-2023-0852- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2023-12850
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
- Record
EUVD-2023-12850- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f5wf-gmvm-79qm
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office...
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
- Record
GHSA-f5wf-gmvm-79qm- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
NVD
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
- Record
CVE-2023-0852- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
Affected products
- canon mf1127c firmware
- canon i-sensys lbp621cw firmware
- canon i-sensys lbp623cdw firmware
- canon i-sensys lbp633cdw firmware
- canon i-sensys lbp664cx firmware
- canon i-sensys mf641cw firmware
- canon i-sensys mf643cdw firmware
- canon i-sensys mf645cx firmware
- canon i-sensys mf742cdw firmware
- canon i-sensys mf744cdw firmware
- canon i-sensys mf746cx firmware
- canon i-sensys x c1127i firmware
Show 34 moreShow less
- canon i-sensys x c1127if firmware
- canon i-sensys x c1127p firmware
- canon imageprograf tc-20 firmware
- canon imageprograf tc-20m firmware
- canon lbp1127c firmware
- canon lbp122dw firmware
- canon lbp621c firmware
- canon lbp622c firmware
- canon lbp622cdw firmware
- canon lbp623cdw firmware
- canon lbp661c firmware
- canon lbp662c firmware
- canon lbp664c firmware
- canon lbp664cdw firmware
- canon maxify gx3020 firmware
- canon maxify gx4020 firmware
- canon mf262dw ii firmware
- canon mf264dw ii firmware
- canon mf267dw ii firmware
- canon mf269dw ii firmware
- canon mf269dw vp ii firmware
- canon mf272dw firmware
- canon mf273dw firmware
- canon mf275dw firmware
- canon mf641cw firmware
- canon mf642cdw firmware
- canon mf644cdw firmware
- canon mf741cdw firmware
- canon mf743cdw firmware
- canon mf745cdw firmware
- canon mf746cdw firmware
- canon pixma g3270 firmware
- canon pixma g4270 firmware
- canon inc. office/small office multifunction printers and laser printers
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-0852 is a critical vulnerability (CVSS 9.8) in Canon Mf1127c Firmware, published May 11, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.14%, the 66th percentile. No source names a fixed version.
References
canon-europe.com/support/product-security-latest-news
psirt.canon/advisory-information/cp2023-001
canon.jp/support/support-info/230414vulnerability-response
usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
nvd.nist.gov/vuln/detail/CVE-2023-0852
github.com/advisories/GHSA-f5wf-gmvm-79qm