Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw/Satera MF551dw/Satera MF457dw firmware v05.07 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw/imageCLASS MF455dw/imageCLASS MF453dw/imageCLASS MF452dw/imageCLASS MF451dw/imageCLASS LBP237dw/imageCLASS LBP236dw/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II/imageCLASS X LBP1238 II firmware v05.07 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw/i-SENSYS MF553dw/i-SENSYS MF552dw/i-SENSYS MF455dw/i-SENSYS MF453dw/i-SENSYS LBP236dw/i-SENSYS LBP233dw/imageRUNNER 1643iF II/imageRUNNER 1643i II/i-SENSYS X 1238iF II/i-SENSYS X 1238i II/i-SENSYS X 1238P II/i-SENSYS X 1238Pr II firmware v05.07 and earlier sold in Europe.

Project Subscriptions

Vendors Products
I-sensys Lbp233dw Subscribe
I-sensys Lbp233dw Firmware Subscribe
I-sensys Lbp236dw Subscribe
I-sensys Lbp236dw Firmware Subscribe
I-sensys Lbp631cdw Subscribe
I-sensys Lbp631cdw Firmware Subscribe
I-sensys Lbp633cdw Subscribe
I-sensys Lbp633cdw Firmware Subscribe
I-sensys Mf453dw Subscribe
I-sensys Mf453dw Firmware Subscribe
I-sensys Mf455dw Subscribe
I-sensys Mf455dw Firmware Subscribe
I-sensys Mf552dw Subscribe
I-sensys Mf552dw Firmware Subscribe
I-sensys Mf553dw Subscribe
I-sensys Mf553dw Firmware Subscribe
I-sensys Mf651cdw Subscribe
I-sensys Mf651cdw Firmware Subscribe
I-sensys Mf655cdw Subscribe
I-sensys Mf655cdw Firmware Subscribe
I-sensys Mf657cdw Subscribe
I-sensys Mf657cdw Firmware Subscribe
I-sensys X 1238i Ii Subscribe
I-sensys X 1238i Ii Firmware Subscribe
I-sensys X 1238if Ii Subscribe
I-sensys X 1238if Ii Firmware Subscribe
I-sensys X 1238p Ii Subscribe
I-sensys X 1238p Ii Firmware Subscribe
I-sensys X 1238pr Ii Subscribe
I-sensys X 1238pr Ii Firmware Subscribe
Imageclass Lbp236dw Subscribe
Imageclass Lbp236dw Firmware Subscribe
Imageclass Lbp237dw Subscribe
Imageclass Lbp237dw Firmware Subscribe
Imageclass Lbp632cdw Subscribe
Imageclass Lbp632cdw Firmware Subscribe
Imageclass Lbp633cdw Subscribe
Imageclass Lbp633cdw Firmware Subscribe
Imageclass Mf451dw Subscribe
Imageclass Mf451dw Firmware Subscribe
Imageclass Mf452dw Subscribe
Imageclass Mf452dw Firmware Subscribe
Imageclass Mf453dw Subscribe
Imageclass Mf453dw Firmware Subscribe
Imageclass Mf455dw Subscribe
Imageclass Mf455dw Firmware Subscribe
Imageclass Mf652cdw Subscribe
Imageclass Mf652cdw Firmware Subscribe
Imageclass Mf653cdw Subscribe
Imageclass Mf653cdw Firmware Subscribe
Imageclass Mf654cdw Subscribe
Imageclass Mf654cdw Firmware Subscribe
Imageclass Mf656cdw Subscribe
Imageclass Mf656cdw Firmware Subscribe
Imageclass X Lbp1238 Ii Subscribe
Imageclass X Lbp1238 Ii Firmware Subscribe
Imageclass X Mf1238 Ii Subscribe
Imageclass X Mf1238 Ii Firmware Subscribe
Imageclass X Mf1643i Ii Subscribe
Imageclass X Mf1643i Ii Firmware Subscribe
Imageclass X Mf1643if Ii Subscribe
Imageclass X Mf1643if Ii Firmware Subscribe
Imagerunner 1643i Ii Subscribe
Imagerunner 1643i Ii Firmware Subscribe
Imagerunner 1643if Ii Subscribe
Imagerunner 1643if Ii Firmware Subscribe
Satera Mf457dw Subscribe
Satera Mf457dw Firmware Subscribe
Satera Mf551dw Subscribe
Satera Mf551dw Firmware Subscribe
Satera Mf654cdw Subscribe
Satera Mf654cdw Firmware Subscribe
Satera Mf656cdw Subscribe
Satera Mf656cdw Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2025-27695 Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw/Satera MF551dw/Satera MF457dw firmware v05.07 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw/imageCLASS MF455dw/imageCLASS MF453dw/imageCLASS MF452dw/imageCLASS MF451dw/imageCLASS LBP237dw/imageCLASS LBP236dw/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II/imageCLASS X LBP1238 II firmware v05.07 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw/i-SENSYS MF553dw/i-SENSYS MF552dw/i-SENSYS MF455dw/i-SENSYS MF453dw/i-SENSYS LBP236dw/i-SENSYS LBP233dw/imageRUNNER 1643iF II/imageRUNNER 1643i II/i-SENSYS X 1238iF II/i-SENSYS X 1238i II/i-SENSYS X 1238P II/i-SENSYS X 1238Pr II firmware v05.07 and earlier sold in Europe.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 04 Jun 2025 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Canon
Canon i-sensys Lbp233dw
Canon i-sensys Lbp233dw Firmware
Canon i-sensys Lbp236dw
Canon i-sensys Lbp236dw Firmware
Canon i-sensys Lbp631cdw
Canon i-sensys Lbp631cdw Firmware
Canon i-sensys Lbp633cdw
Canon i-sensys Lbp633cdw Firmware
Canon i-sensys Mf453dw
Canon i-sensys Mf453dw Firmware
Canon i-sensys Mf455dw
Canon i-sensys Mf455dw Firmware
Canon i-sensys Mf552dw
Canon i-sensys Mf552dw Firmware
Canon i-sensys Mf553dw
Canon i-sensys Mf553dw Firmware
Canon i-sensys Mf651cdw
Canon i-sensys Mf651cdw Firmware
Canon i-sensys Mf655cdw
Canon i-sensys Mf655cdw Firmware
Canon i-sensys Mf657cdw
Canon i-sensys Mf657cdw Firmware
Canon i-sensys X 1238i Ii
Canon i-sensys X 1238i Ii Firmware
Canon i-sensys X 1238if Ii
Canon i-sensys X 1238if Ii Firmware
Canon i-sensys X 1238p Ii
Canon i-sensys X 1238p Ii Firmware
Canon i-sensys X 1238pr Ii
Canon i-sensys X 1238pr Ii Firmware
Canon imageclass Lbp236dw
Canon imageclass Lbp236dw Firmware
Canon imageclass Lbp237dw
Canon imageclass Lbp237dw Firmware
Canon imageclass Lbp632cdw
Canon imageclass Lbp632cdw Firmware
Canon imageclass Lbp633cdw
Canon imageclass Lbp633cdw Firmware
Canon imageclass Mf451dw
Canon imageclass Mf451dw Firmware
Canon imageclass Mf452dw
Canon imageclass Mf452dw Firmware
Canon imageclass Mf453dw
Canon imageclass Mf453dw Firmware
Canon imageclass Mf455dw
Canon imageclass Mf455dw Firmware
Canon imageclass Mf652cdw
Canon imageclass Mf652cdw Firmware
Canon imageclass Mf653cdw
Canon imageclass Mf653cdw Firmware
Canon imageclass Mf654cdw
Canon imageclass Mf654cdw Firmware
Canon imageclass Mf656cdw
Canon imageclass Mf656cdw Firmware
Canon imageclass X Lbp1238 Ii
Canon imageclass X Lbp1238 Ii Firmware
Canon imageclass X Mf1238 Ii
Canon imageclass X Mf1238 Ii Firmware
Canon imageclass X Mf1643i Ii
Canon imageclass X Mf1643i Ii Firmware
Canon imageclass X Mf1643if Ii
Canon imageclass X Mf1643if Ii Firmware
Canon imagerunner 1643i Ii
Canon imagerunner 1643i Ii Firmware
Canon imagerunner 1643if Ii
Canon imagerunner 1643if Ii Firmware
Canon satera Mf457dw
Canon satera Mf457dw Firmware
Canon satera Mf551dw
Canon satera Mf551dw Firmware
Canon satera Mf654cdw
Canon satera Mf654cdw Firmware
Canon satera Mf656cdw
Canon satera Mf656cdw Firmware
CPEs cpe:2.3:h:canon:i-sensys_lbp233dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_lbp236dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_lbp631cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_lbp633cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf453dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf455dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf552dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf553dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf651cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf655cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_mf657cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_1238i_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_1238if_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_1238p_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:i-sensys_x_1238pr_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_lbp236dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_lbp237dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_lbp632cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_lbp633cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_mf451dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_mf452dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_mf453dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_mf455dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_mf652cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_mf653cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_mf654cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_mf656cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_x_lbp1238_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_x_mf1238_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_x_mf1643i_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imageclass_x_mf1643if_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imagerunner_1643i_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:imagerunner_1643if_ii:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:satera_mf457dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:satera_mf551dw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:satera_mf654cdw:-:*:*:*:*:*:*:*
cpe:2.3:h:canon:satera_mf656cdw:-:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_lbp233dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_lbp236dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_lbp631cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_lbp633cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf453dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf455dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf552dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf553dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf651cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf655cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_mf657cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_1238i_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_1238if_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_1238p_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:i-sensys_x_1238pr_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_lbp236dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_lbp237dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_lbp632cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_lbp633cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_mf451dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_mf452dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_mf453dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_mf455dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_mf652cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_mf653cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_mf654cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_mf656cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_x_lbp1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_x_mf1238_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_x_mf1643i_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imageclass_x_mf1643if_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imagerunner_1643i_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:imagerunner_1643if_ii_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:satera_mf457dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:satera_mf551dw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:satera_mf654cdw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:canon:satera_mf656cdw_firmware:*:*:*:*:*:*:*:*
Vendors & Products Canon
Canon i-sensys Lbp233dw
Canon i-sensys Lbp233dw Firmware
Canon i-sensys Lbp236dw
Canon i-sensys Lbp236dw Firmware
Canon i-sensys Lbp631cdw
Canon i-sensys Lbp631cdw Firmware
Canon i-sensys Lbp633cdw
Canon i-sensys Lbp633cdw Firmware
Canon i-sensys Mf453dw
Canon i-sensys Mf453dw Firmware
Canon i-sensys Mf455dw
Canon i-sensys Mf455dw Firmware
Canon i-sensys Mf552dw
Canon i-sensys Mf552dw Firmware
Canon i-sensys Mf553dw
Canon i-sensys Mf553dw Firmware
Canon i-sensys Mf651cdw
Canon i-sensys Mf651cdw Firmware
Canon i-sensys Mf655cdw
Canon i-sensys Mf655cdw Firmware
Canon i-sensys Mf657cdw
Canon i-sensys Mf657cdw Firmware
Canon i-sensys X 1238i Ii
Canon i-sensys X 1238i Ii Firmware
Canon i-sensys X 1238if Ii
Canon i-sensys X 1238if Ii Firmware
Canon i-sensys X 1238p Ii
Canon i-sensys X 1238p Ii Firmware
Canon i-sensys X 1238pr Ii
Canon i-sensys X 1238pr Ii Firmware
Canon imageclass Lbp236dw
Canon imageclass Lbp236dw Firmware
Canon imageclass Lbp237dw
Canon imageclass Lbp237dw Firmware
Canon imageclass Lbp632cdw
Canon imageclass Lbp632cdw Firmware
Canon imageclass Lbp633cdw
Canon imageclass Lbp633cdw Firmware
Canon imageclass Mf451dw
Canon imageclass Mf451dw Firmware
Canon imageclass Mf452dw
Canon imageclass Mf452dw Firmware
Canon imageclass Mf453dw
Canon imageclass Mf453dw Firmware
Canon imageclass Mf455dw
Canon imageclass Mf455dw Firmware
Canon imageclass Mf652cdw
Canon imageclass Mf652cdw Firmware
Canon imageclass Mf653cdw
Canon imageclass Mf653cdw Firmware
Canon imageclass Mf654cdw
Canon imageclass Mf654cdw Firmware
Canon imageclass Mf656cdw
Canon imageclass Mf656cdw Firmware
Canon imageclass X Lbp1238 Ii
Canon imageclass X Lbp1238 Ii Firmware
Canon imageclass X Mf1238 Ii
Canon imageclass X Mf1238 Ii Firmware
Canon imageclass X Mf1643i Ii
Canon imageclass X Mf1643i Ii Firmware
Canon imageclass X Mf1643if Ii
Canon imageclass X Mf1643if Ii Firmware
Canon imagerunner 1643i Ii
Canon imagerunner 1643i Ii Firmware
Canon imagerunner 1643if Ii
Canon imagerunner 1643if Ii Firmware
Canon satera Mf457dw
Canon satera Mf457dw Firmware
Canon satera Mf551dw
Canon satera Mf551dw Firmware
Canon satera Mf654cdw
Canon satera Mf654cdw Firmware
Canon satera Mf656cdw
Canon satera Mf656cdw Firmware

Tue, 27 May 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Sun, 25 May 2025 23:45:00 +0000

Type Values Removed Values Added
Description Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw/Satera MF551dw/Satera MF457dw firmware v05.07 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw/imageCLASS MF455dw/imageCLASS MF453dw/imageCLASS MF452dw/imageCLASS MF451dw/imageCLASS LBP237dw/imageCLASS LBP236dw/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II/imageCLASS X LBP1238 II firmware v05.07 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw/i-SENSYS MF553dw/i-SENSYS MF552dw/i-SENSYS MF455dw/i-SENSYS MF453dw/i-SENSYS LBP236dw/i-SENSYS LBP233dw/imageRUNNER 1643iF II/imageRUNNER 1643i II/i-SENSYS X 1238iF II/i-SENSYS X 1238i II/i-SENSYS X 1238P II/i-SENSYS X 1238Pr II firmware v05.07 and earlier sold in Europe.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Canon

Published:

Updated: 2025-05-27T14:20:02.153Z

Reserved: 2025-03-10T04:32:48.049Z

Link: CVE-2025-2146

cve-icon Vulnrichment

Updated: 2025-05-27T14:19:57.652Z

cve-icon NVD

Status : Analyzed

Published: 2025-05-26T00:15:19.900

Modified: 2025-06-03T15:49:50.793

Link: CVE-2025-2146

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses