{"id":"CVE-2023-0853","aliases":["EUVD-2023-12851","GHSA-w39m-p65m-fg87"],"status":"published","title":"Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction...","description":"Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01163,"percentile":0.67475,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121","CWE-787"],"published":"2023-05-11T00:00:00Z","modified":"2026-06-17T05:26:27Z","products":[{"vendor":"canon","product":"i-sensys_lbp621cw_firmware"},{"vendor":"canon","product":"i-sensys_lbp623cdw_firmware"},{"vendor":"canon","product":"i-sensys_lbp633cdw_firmware"},{"vendor":"canon","product":"i-sensys_lbp664cx_firmware"},{"vendor":"canon","product":"i-sensys_mf641cw_firmware"},{"vendor":"canon","product":"i-sensys_mf643cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf645cx_firmware"},{"vendor":"canon","product":"i-sensys_mf742cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf744cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf746cx_firmware"},{"vendor":"canon","product":"i-sensys_x_c1127i_firmware"},{"vendor":"canon","product":"i-sensys_x_c1127if_firmware"},{"vendor":"canon","product":"i-sensys_x_c1127p_firmware"},{"vendor":"canon","product":"imageprograf_tc-20_firmware"},{"vendor":"canon","product":"imageprograf_tc-20m_firmware"},{"vendor":"canon","product":"lbp1127c_firmware"},{"vendor":"canon","product":"lbp122dw_firmware"},{"vendor":"canon","product":"lbp621c_firmware"},{"vendor":"canon","product":"lbp622c_firmware"},{"vendor":"canon","product":"lbp622cdw_firmware"},{"vendor":"canon","product":"lbp623cdw_firmware"},{"vendor":"canon","product":"lbp661c_firmware"},{"vendor":"canon","product":"lbp662c_firmware"},{"vendor":"canon","product":"lbp664c_firmware"},{"vendor":"canon","product":"lbp664cdw_firmware"},{"vendor":"canon","product":"maxify_gx3020_firmware"},{"vendor":"canon","product":"maxify_gx4020_firmware"},{"vendor":"canon","product":"mf1127c_firmware"},{"vendor":"canon","product":"mf262dw_ii_firmware"},{"vendor":"canon","product":"mf264dw_ii_firmware"},{"vendor":"canon","product":"mf267dw_ii_firmware"},{"vendor":"canon","product":"mf269dw_ii_firmware"},{"vendor":"canon","product":"mf269dw_vp_ii_firmware"},{"vendor":"canon","product":"mf272dw_firmware"},{"vendor":"canon","product":"mf273dw_firmware"},{"vendor":"canon","product":"mf275dw_firmware"},{"vendor":"canon","product":"mf641cw_firmware"},{"vendor":"canon","product":"mf642cdw_firmware"},{"vendor":"canon","product":"mf644cdw_firmware"},{"vendor":"canon","product":"mf741cdw_firmware"},{"vendor":"canon","product":"mf743cdw_firmware"},{"vendor":"canon","product":"mf745cdw_firmware"},{"vendor":"canon","product":"mf746cdw_firmware"},{"vendor":"canon","product":"pixma_g3270_firmware"},{"vendor":"canon","product":"pixma_g4270_firmware"},{"vendor":"canon inc.","product":"canon office/small office multifunction printers and laser printers"}],"references":[{"url":"https://www.canon-europe.com/support/product-security-latest-news/","tags":["x_transferred"]},{"url":"https://psirt.canon/advisory-information/cp2023-001/","tags":["x_transferred"]},{"url":"https://canon.jp/support/support-info/230414vulnerability-response","tags":["x_transferred"]},{"url":"https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0853"},{"url":"https://psirt.canon/advisory-information/cp2023-001"},{"url":"https://www.canon-europe.com/support/product-security-latest-news"},{"url":"https://github.com/advisories/GHSA-w39m-p65m-fg87"}],"sources":{"cve":[{"id":"CVE-2023-0853","description":"Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T00:00:00Z","modified":"2025-02-10T20:57:39.735Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:35:34.923818Z"}],"euvd":[{"id":"EUVD-2023-12851","description":"Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T00:00:00Z","modified":"2025-02-10T20:57:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:00.770319Z"}],"ghsa":[{"id":"GHSA-w39m-p65m-fg87","title":"Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction...","description":"Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T15:30:23Z","modified":"2024-04-04T04:02:20Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:56:20.636792Z"}],"nvd":[{"id":"CVE-2023-0853","description":"Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T13:15:11.96Z","modified":"2026-06-17T05:26:27.62Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:08:02.399327Z"}]}}