Canon MF745CDW Firmware vulnerabilities

12 CVEs affecting Canon MF745CDW Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-0859, published 2023-05-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-24673, published 2023-03-28. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this…
CVE-2022-24672, published 2023-03-28. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this…
CVE-2023-0854, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
CVE-2023-0853, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the…
CVE-2023-0856, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product…
CVE-2023-0855, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected…
CVE-2023-0852, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the…
CVE-2023-0851, published 2023-05-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected…
CVE-2022-24674, published 2023-03-28. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this…
CVE-2023-0857, published 2023-05-11. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may…

Latest

CVE-2023-0859, published 2023-05-11. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C…
CVE-2023-0858, published 2023-05-11. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the…