{"id":"CVE-2023-0858","aliases":["EUVD-2023-12856","GHSA-fg53-q2jq-9xxq"],"status":"published","title":"Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser...","description":"Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0057,"percentile":0.47497,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284","CWE-287"],"published":"2023-05-11T00:00:00Z","modified":"2026-06-17T05:26:28Z","products":[{"vendor":"canon","product":"i-sensys_lbp621cw_firmware"},{"vendor":"canon","product":"i-sensys_lbp623cdw_firmware"},{"vendor":"canon","product":"i-sensys_lbp633cdw_firmware"},{"vendor":"canon","product":"i-sensys_lbp664cx_firmware"},{"vendor":"canon","product":"i-sensys_mf641cw_firmware"},{"vendor":"canon","product":"i-sensys_mf643cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf645cx_firmware"},{"vendor":"canon","product":"i-sensys_mf742cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf744cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf746cx_firmware"},{"vendor":"canon","product":"i-sensys_x_c1127i_firmware"},{"vendor":"canon","product":"i-sensys_x_c1127if_firmware"},{"vendor":"canon","product":"i-sensys_x_c1127p_firmware"},{"vendor":"canon","product":"imageprograf_tc-20_firmware"},{"vendor":"canon","product":"imageprograf_tc-20m_firmware"},{"vendor":"canon","product":"lbp1127c_firmware"},{"vendor":"canon","product":"lbp122dw_firmware"},{"vendor":"canon","product":"lbp621c_firmware"},{"vendor":"canon","product":"lbp622c_firmware"},{"vendor":"canon","product":"lbp622cdw_firmware"},{"vendor":"canon","product":"lbp623cdw_firmware"},{"vendor":"canon","product":"lbp661c_firmware"},{"vendor":"canon","product":"lbp662c_firmware"},{"vendor":"canon","product":"lbp664c_firmware"},{"vendor":"canon","product":"lbp664cdw_firmware"},{"vendor":"canon","product":"maxify_gx3020_firmware"},{"vendor":"canon","product":"maxify_gx4020_firmware"},{"vendor":"canon","product":"mf1127c_firmware"},{"vendor":"canon","product":"mf262dw_ii_firmware"},{"vendor":"canon","product":"mf264dw_ii_firmware"},{"vendor":"canon","product":"mf267dw_ii_firmware"},{"vendor":"canon","product":"mf269dw_ii_firmware"},{"vendor":"canon","product":"mf269dw_vp_ii_firmware"},{"vendor":"canon","product":"mf272dw_firmware"},{"vendor":"canon","product":"mf273dw_firmware"},{"vendor":"canon","product":"mf275dw_firmware"},{"vendor":"canon","product":"mf641cw_firmware"},{"vendor":"canon","product":"mf642cdw_firmware"},{"vendor":"canon","product":"mf644cdw_firmware"},{"vendor":"canon","product":"mf741cdw_firmware"},{"vendor":"canon","product":"mf743cdw_firmware"},{"vendor":"canon","product":"mf745cdw_firmware"},{"vendor":"canon","product":"mf746cdw_firmware"},{"vendor":"canon","product":"pixma_g3270_firmware"},{"vendor":"canon","product":"pixma_g4270_firmware"},{"vendor":"canon inc.","product":"canon office/small office multifunction printers and laser printers"}],"references":[{"url":"https://www.canon-europe.com/support/product-security-latest-news/","tags":["x_transferred"]},{"url":"https://psirt.canon/advisory-information/cp2023-001/","tags":["x_transferred"]},{"url":"https://canon.jp/support/support-info/230414vulnerability-response","tags":["x_transferred"]},{"url":"https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0858"},{"url":"https://psirt.canon/advisory-information/cp2023-001"},{"url":"https://www.canon-europe.com/support/product-security-latest-news"},{"url":"https://github.com/advisories/GHSA-fg53-q2jq-9xxq"}],"sources":{"cve":[{"id":"CVE-2023-0858","description":"Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T00:00:00Z","modified":"2025-01-24T21:11:04.107Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:35.256261Z"}],"euvd":[{"id":"EUVD-2023-12856","description":"Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T00:00:00Z","modified":"2025-01-24T21:11:04Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T00:04:13.087176Z"}],"ghsa":[{"id":"GHSA-fg53-q2jq-9xxq","title":"Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser...","description":"Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T15:30:24Z","modified":"2024-04-04T04:02:30Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-284","CWE-287"],"updated_at":"2026-11-02T14:56:20.636792Z"}],"nvd":[{"id":"CVE-2023-0858","description":"Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T13:15:13.177Z","modified":"2026-06-17T05:26:28.4Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284","CWE-287"],"updated_at":"2026-11-02T14:08:02.399327Z"}]}}