CVE-2023-0858

Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser...

3.1 Low

Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: None
Availability: None

Exploit likelihood

0.57%Up 0.5 points since May 12, 2023

What each source reports

CVE List Score used 3.1

Record: CVE-2023-0858
CVSS 3.1: 3.1 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Weakness: CWE-284
Updated: 2026-11-02

EUVDEUVD-2023-12856 3.1

Record: EUVD-2023-12856
CVSS 3.1: 3.1 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fg53-q2jq-9xxq 3.1

Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser...

Record: GHSA-fg53-q2jq-9xxq
CVSS 3.1: 3.1 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Weakness: CWE-284, CWE-287
Updated: 2026-11-02

NVD 3.1

Record: CVE-2023-0858
CVSS 3.1: 3.1 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness: CWE-284, CWE-287
Updated: 2026-11-02

Affected products

Show 34 moreShow less

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-0858 is a low vulnerability (CVSS 3.1) in Canon Mf1127c Firmware, published May 11, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. No source names a fixed version.