CVE-2022-24673: Canon 1435i+ Firmware

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15845.

Affected products

  • Canon 1435i+ Firmware: affected versions not specified
  • Canon 1435if+ Firmware: affected versions not specified
  • Canon 1435if Firmware: affected versions not specified
  • Canon 1435p+ Firmware: affected versions not specified
  • Canon 1435p Firmware: affected versions not specified
  • Canon d1520 Firmware: affected versions not specified
  • Canon d1550 Firmware: affected versions not specified
  • Canon d1620 Firmware: affected versions not specified
  • Canon d1650 Firmware: affected versions not specified
  • Canon IR1435I Firmware: affected versions not specified
  • Canon IR1643I Firmware: affected versions not specified
  • Canon IR1643IF Firmware: affected versions not specified
  • Canon LBP1127C Firmware: affected versions not specified
  • Canon LBP1238 Firmware: affected versions not specified
  • Canon LBP1238 Ii Firmware: affected versions not specified
  • Canon LBP214DW Firmware: affected versions not specified
  • Canon LBP215DW Firmware: affected versions not specified
  • Canon LBP226DW Firmware: affected versions not specified
  • Canon LBP227DW Firmware: affected versions not specified
  • Canon LBP228DW Firmware: affected versions not specified
  • Canon LBP236DW Firmware: affected versions not specified
  • Canon LBP237DW Firmware: affected versions not specified
  • Canon LBP251DW Firmware: affected versions not specified
  • Canon LBP253DW Firmware: affected versions not specified
  • Canon LBP612CDW Firmware: affected versions not specified
  • and 51 more

Published 2023-03-28. Last modified 2026-06-17.