CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2025-14234

CVSS 9.3v4.0pub. 2026-01-16upd. 2026-01-26

Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.

🇵🇱 Read Polish description →

🤖 AI Analysis

How it works

A CWE-787 (out-of-bounds write) error occurs when processing CPCA protocol lists by the printer firmware. An attacker present in the same network segment can send crafted data that causes memory to be overwritten beyond the boundaries of the allocated buffer. This can result in device crash (unresponsiveness) or — in the case of controlled overwrite — arbitrary code execution in the context of the printer firmware. The attack requires no authentication or user interaction.

Impact

An attacker can cause permanent unavailability of the device or execute arbitrary code on the vulnerable printer, gaining full control over it, including access to processed documents and network configuration.

Mitigation & patch

Device firmware should be updated to a version newer than v06.02 in accordance with the manufacturer's recommendations published in the references (canon.jp, psirt.canon, canon-europe.com, usa.canon.com). Until the update is applied, it is recommended to isolate printers in a dedicated network segment (VLAN) with restricted access only for authorized hosts and to block unauthorized network traffic directed to printing devices at the firewall level.

Who is affected

Firmware version v06.02 and earlier for the following product lines: Satera LBP670C Series / Satera MF750C Series (Japan); Color imageCLASS LBP630C / Color imageCLASS MF650C Series / imageCLASS LBP230 Series / imageCLASS X LBP1238 II / imageCLASS MF450 Series / imageCLASS X MF1238 II / imageCLASS X MF1643i II / imageCLASS X MF1643iF II (USA); i-SENSYS LBP630C Series / i-SENSYS MF650C Series / i-SENSYS LBP230 Series / 1238P II / 1238Pr II / i-SENSYS MF450 Series / i-SENSYS MF550 Series / 1238i II / 1238iF II / imageRUNNER 1643i II / imageRUNNER 1643iF II (Europe). In the context of reported products, it also affects Canon MF455DW, MF453DW, MF452DW.

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X