{"id":"CVE-2023-6232","aliases":["EUVD-2023-58479","GHSA-vv93-j256-hpwh"],"status":"published","title":"Buffer overflow in the Address Book username process in authentication of Mobile Device Function...","description":"Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01457,"percentile":0.73693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2024-02-06T00:22:31Z","modified":"2026-06-17T06:50:20Z","products":[{"vendor":"canon","product":"i-sensys_lbp673cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf752cdw_firmware"},{"vendor":"canon","product":"i-sensys_mf754cdw_firmware"},{"vendor":"canon","product":"i-sensys_x_c1333i_firmware"},{"vendor":"canon","product":"i-sensys_x_c1333if_firmware"},{"vendor":"canon","product":"i-sensys_x_c1333p_firmware"},{"vendor":"canon","product":"lbp122dw_firmware"},{"vendor":"canon","product":"lbp1238_ii_firmware"},{"vendor":"canon","product":"lbp1333c_firmware"},{"vendor":"canon","product":"lbp236dw_firmware"},{"vendor":"canon","product":"lbp237dw_firmware"},{"vendor":"canon","product":"lbp671c_firmware"},{"vendor":"canon","product":"lbp672c_firmware"},{"vendor":"canon","product":"lbp674c_firmware"},{"vendor":"canon","product":"lbp674cdw_firmware"},{"vendor":"canon","product":"mf1238_ii_firmware"},{"vendor":"canon","product":"mf1333c_firmware"},{"vendor":"canon","product":"mf1643i_ii_firmware"},{"vendor":"canon","product":"mf1643if_ii_firmware"},{"vendor":"canon","product":"mf272dw_firmware"},{"vendor":"canon","product":"mf273dw_firmware"},{"vendor":"canon","product":"mf275dw_firmware"},{"vendor":"canon","product":"mf451dw_firmware"},{"vendor":"canon","product":"mf452dw_firmware"},{"vendor":"canon","product":"mf453dw_firmware"},{"vendor":"canon","product":"mf455dw_firmware"},{"vendor":"canon","product":"mf751cdw_firmware"},{"vendor":"canon","product":"mf753cdw_firmware"},{"vendor":"canon","product":"mf755cdw_firmware"},{"vendor":"canon inc.","product":"c1333i series"},{"vendor":"canon inc.","product":"c1333p"},{"vendor":"canon inc.","product":"color imageclass lbp674c"},{"vendor":"canon inc.","product":"color imageclass mf750c series"},{"vendor":"canon inc.","product":"color imageclass x lbp1333c"},{"vendor":"canon inc.","product":"color imageclass x mf1333c series"},{"vendor":"canon inc.","product":"i-sensys lbp673cdw"},{"vendor":"canon inc.","product":"i-sensys mf750c series"},{"vendor":"canon inc.","product":"satera lbp670c series"},{"vendor":"canon inc.","product":"satera mf750c series"}],"references":[{"url":"https://psirt.canon/advisory-information/cp2024-001/","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://canon.jp/support/support-info/240205vulnerability-response","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://www.canon-europe.com/support/product-security-latest-news/","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6232"},{"url":"https://psirt.canon/advisory-information/cp2024-001"},{"url":"https://www.canon-europe.com/support/product-security-latest-news"},{"url":"https://github.com/advisories/GHSA-vv93-j256-hpwh"}],"sources":{"cve":[{"id":"CVE-2023-6232","description":"Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n","status":"published","published":"2024-02-06T00:22:31.201Z","modified":"2025-06-17T21:29:27.066Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:25.095989Z"}],"euvd":[{"id":"EUVD-2023-58479","description":"Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n","status":"published","published":"2024-02-06T00:22:31Z","modified":"2025-06-17T21:29:27Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:20.512078Z"}],"ghsa":[{"id":"GHSA-vv93-j256-hpwh","title":"Buffer overflow in the Address Book username process in authentication of Mobile Device Function...","description":"Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n","status":"published","published":"2024-02-06T03:33:00Z","modified":"2024-02-22T05:07:57Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:55:37.87337Z"}],"nvd":[{"id":"CVE-2023-6232","description":"Buffer overflow in the Address Book username process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n","status":"published","published":"2024-02-06T01:15:08.74Z","modified":"2026-06-17T06:50:20.97Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:09:04.527564Z"}]}}