Buffer Overflow Vulnerability Affects Satera MF750C Series Printers

CVE-2024-0244

What is CVE-2024-0244?

CVE-2024-0244 is a buffer overflow vulnerability affecting the Canon Satera MF750C series multifunction printers and laser printers. This vulnerability lies within the CPCA PCFAX number processing component and affects firmware versions v03.07 and earlier. The vulnerability allows an attacker on the same network segment to exploit the affected products, resulting in them becoming unresponsive or enabling arbitrary code execution. This can have serious implications for organizations, as these printers are commonly used in office environments where sensitive information may be processed or printed. If exploited, an attacker could potentially gain access to the local network, ultimately compromising the confidentiality and integrity of organizational data.

Potential impact of CVE-2024-0244

1. System Unresponsiveness: An attacker may cause affected printers to become unresponsive, disrupting normal business operations and leading to productivity losses while IT teams address the outage.

2. Arbitrary Code Execution: The ability to execute arbitrary code could allow an attacker to gain control over the printer and potentially pivot to other systems on the network, increasing the risk of further compromise.

3. Data Loss and Breaches: Exploitation of this vulnerability could lead to unauthorized access to sensitive documents processed by the printer, resulting in potential data breaches and violations of data protection regulations.

References