Beware of Buffer Overflow Vulnerability in Canon Printers

CVECVE-2023-0854
CVSScvssV3_1: 9.8
SourceCVE-2023-0854

A critical buffer overflow vulnerability has been discovered in Canon printers that could allow remote attackers to take control of affected devices.

The vulnerability exists in the way Canon printers handle NetBIOS queries and communication. By sending specially crafted packets, an attacker on the same network segment may be able to overflow buffers and execute arbitrary code.

This could allow the attacker to install malware, view and steal sensitive documents being printed, or completely disable the printer’s functionality.

The vulnerability affects various Canon printer models if they are running firmware versions 11.04 or earlier.

To stay protected, users are advised to update their Canon printer firmware to the latest version. Regularly checking for and applying updates is important to fix security issues.

It’s also a good idea to isolate printers from external network access whenever possible. Using them only on private, internal networks reduces exposure to remote attacks.

By taking some basic precautions like keeping software updated, users can help protect themselves and their organizations from exploits of this critical buffer overflow vulnerability in Canon printers.

References