CVE-2023-6233
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser...
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
- Record
CVE-2023-6233- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2023-58480
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
- Record
EUVD-2023-58480- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-99jr-pjjw-hqmq
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser...
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
- Record
GHSA-99jr-pjjw-hqmq- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.
- Record
CVE-2023-6233- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
- canon inc. c1333i series
- canon inc. c1333p
- canon inc. color imageclass lbp674c
- canon inc. color imageclass mf750c series
- canon inc. color imageclass x lbp1333c
- canon inc. color imageclass x mf1333c series
- canon inc. i-sensys lbp673cdw
- canon inc. i-sensys mf750c series
- canon inc. satera lbp670c series
- canon inc. satera mf750c series
- canon i-sensys lbp673cdw firmware
- canon i-sensys mf752cdw firmware
Show 27 moreShow less
- canon i-sensys mf754cdw firmware
- canon i-sensys x c1333i firmware
- canon i-sensys x c1333if firmware
- canon i-sensys x c1333p firmware
- canon lbp122dw firmware
- canon lbp1238 ii firmware
- canon lbp1333c firmware
- canon lbp236dw firmware
- canon lbp237dw firmware
- canon lbp671c firmware
- canon lbp672c firmware
- canon lbp674c firmware
- canon lbp674cdw firmware
- canon mf1238 ii firmware
- canon mf1333c firmware
- canon mf1643i ii firmware
- canon mf1643if ii firmware
- canon mf272dw firmware
- canon mf273dw firmware
- canon mf275dw firmware
- canon mf451dw firmware
- canon mf452dw firmware
- canon mf453dw firmware
- canon mf455dw firmware
- canon mf751cdw firmware
- canon mf753cdw firmware
- canon mf755cdw firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-6233 is a critical vulnerability (CVSS 9.8) in Canon Inc. C1333i Series, published February 6, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.38%, the 72nd percentile. No source names a fixed version.
References
psirt.canon/advisory-information/cp2024-001
canon.jp/support/support-info/240205vulnerability-response
usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers
canon-europe.com/support/product-security-latest-news
nvd.nist.gov/vuln/detail/CVE-2023-6233
github.com/advisories/GHSA-99jr-pjjw-hqmq