Canon Maxify GX4020 Firmware vulnerabilities

9 CVEs affecting Canon Maxify GX4020 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-0859, published 2023-05-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-0854, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
CVE-2023-0853, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the…
CVE-2023-0856, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product…
CVE-2023-0855, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected…
CVE-2023-0852, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the…
CVE-2023-0851, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected…
CVE-2023-0857, published 2023-05-11. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may…
CVE-2023-0858, published 2023-05-11. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the…
CVE-2023-0859, published 2023-05-11. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C…