Buffer Overflow in Small Office Multifunction Printers and Laser Printers by Canon
CVE-2025-2146

9.8CRITICAL

What is CVE-2025-2146?

A buffer overflow vulnerability exists in the web service authentication processing of Canon's Small Office Multifunction Printers and Laser Printers. This vulnerability may allow an attacker within the same network segment to exploit the affected devices. Successful exploitation can cause the printers to become unresponsive or potentially execute arbitrary code, posing significant risks to users and networks.

Affected Version(s)

Color imageCLASS LBP632Cdw 05.07 and earlier

Color imageCLASS LBP633Cdw 05.07 and earlier

Color imageCLASS MF652Cdw 05.07 and earlier

References

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-2146 : Buffer Overflow in Small Office Multifunction Printers and Laser Printers by Canon