{"id":"CVE-2023-0859","aliases":["EUVD-2023-12857","GHSA-vpmg-66f3-9f7w"],"status":"published","title":"Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office...","description":"Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","severity":{"version":"3.1","score":2.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00544,"percentile":0.45954,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1285"],"published":"2023-05-11T00:00:00Z","modified":"2026-06-17T05:26:28Z","products":[{"vendor":"canon","product":"i-sensys_lbp621cw_firmware"},{"vendor":"canon","product":"i-sensys_lbp623cdw_firmware"},{"vendor":"canon","product":"i-sensys_lbp633cdw_firmware"},{"vendor":"canon","product":"i-sensys_lbp664cx_firmware"},{"vendor":"canon","product":"i-sensys_mf641cw_firmware"},{"vendor":"canon","product":"i-sensys_mf643cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf645cx_firmware"},{"vendor":"canon","product":"i-sensys_mf742cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf744cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf746cx_firmware"},{"vendor":"canon","product":"i-sensys_x_c1127i_firmware"},{"vendor":"canon","product":"i-sensys_x_c1127if_firmware"},{"vendor":"canon","product":"i-sensys_x_c1127p_firmware"},{"vendor":"canon","product":"imageprograf_tc-20_firmware"},{"vendor":"canon","product":"imageprograf_tc-20m_firmware"},{"vendor":"canon","product":"lbp1127c_firmware"},{"vendor":"canon","product":"lbp122dw_firmware"},{"vendor":"canon","product":"lbp621c_firmware"},{"vendor":"canon","product":"lbp622c_firmware"},{"vendor":"canon","product":"lbp622cdw_firmware"},{"vendor":"canon","product":"lbp623cdw_firmware"},{"vendor":"canon","product":"lbp661c_firmware"},{"vendor":"canon","product":"lbp662c_firmware"},{"vendor":"canon","product":"lbp664c_firmware"},{"vendor":"canon","product":"lbp664cdw_firmware"},{"vendor":"canon","product":"maxify_gx3020_firmware"},{"vendor":"canon","product":"maxify_gx4020_firmware"},{"vendor":"canon","product":"mf1127c_firmware"},{"vendor":"canon","product":"mf262dw_ii_firmware"},{"vendor":"canon","product":"mf264dw_ii_firmware"},{"vendor":"canon","product":"mf267dw_ii_firmware"},{"vendor":"canon","product":"mf269dw_ii_firmware"},{"vendor":"canon","product":"mf269dw_vp_ii_firmware"},{"vendor":"canon","product":"mf272dw_firmware"},{"vendor":"canon","product":"mf273dw_firmware"},{"vendor":"canon","product":"mf275dw_firmware"},{"vendor":"canon","product":"mf641cw_firmware"},{"vendor":"canon","product":"mf642cdw_firmware"},{"vendor":"canon","product":"mf644cdw_firmware"},{"vendor":"canon","product":"mf741cdw_firmware"},{"vendor":"canon","product":"mf743cdw_firmware"},{"vendor":"canon","product":"mf745cdw_firmware"},{"vendor":"canon","product":"mf746cdw_firmware"},{"vendor":"canon","product":"pixma_g3270_firmware"},{"vendor":"canon","product":"pixma_g4270_firmware"},{"vendor":"canon inc.","product":"canon office/small office multifunction printers and laser printers"}],"references":[{"url":"https://www.canon-europe.com/support/product-security-latest-news/","tags":["x_transferred"]},{"url":"https://psirt.canon/advisory-information/cp2023-001/","tags":["x_transferred"]},{"url":"https://canon.jp/support/support-info/230414vulnerability-response","tags":["x_transferred"]},{"url":"https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0859"},{"url":"https://psirt.canon/advisory-information/cp2023-001"},{"url":"https://www.canon-europe.com/support/product-security-latest-news"},{"url":"https://github.com/advisories/GHSA-vpmg-66f3-9f7w"}],"sources":{"cve":[{"id":"CVE-2023-0859","description":"Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T00:00:00Z","modified":"2025-01-24T21:11:41.07Z","cvss":[{"version":"3.1","score":2.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-1285"],"updated_at":"2026-11-02T14:35:35.580545Z"}],"euvd":[{"id":"EUVD-2023-12857","description":"Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T00:00:00Z","modified":"2025-01-24T21:11:41Z","cvss":[{"version":"3.1","score":2.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T00:04:13.087176Z"}],"ghsa":[{"id":"GHSA-vpmg-66f3-9f7w","title":"Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office...","description":"Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T15:30:24Z","modified":"2024-04-11T21:10:15Z","cvss":[{"version":"3.1","score":2.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-1285"],"updated_at":"2026-11-02T14:57:07.969203Z"}],"nvd":[{"id":"CVE-2023-0859","description":"Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.","status":"published","published":"2023-05-11T13:15:13.427Z","modified":"2026-06-17T05:26:28.553Z","cvss":[{"version":"3.1","score":2.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-1285"],"updated_at":"2026-11-02T14:08:02.399327Z"}]}}