CVE-2023-0851CWE-122

Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the…

Critical · published May 11, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

🔥 A sneaky buffer overflow in Office Multifunction Printers could leave your device unresponsive or worse, executing arbitrary code! Think of it like a printer getting too many orders at once, leading to a jam that stops everything in its tracks, or worse, it starts printing out unauthorized documents! An attacker lurking on the same network segment could exploit this vulnerability to crash your printer, causing chaos in the office. If they're really clever, they might even execute code that compromises your network! That's absolutely devastating for anyone relying on these printers for day-to-day business operations.

Put simply

Think of it like a printer getting too many orders at once, leading to a jam that stops everything in its tracks, or worse, it starts printing out unauthorized documents! This buffer overflow occurs during the CPCA Resource Download process, allowing an attacker to manipulate memory and potentially execute arbitrary code on affected models, which include various series of printers with firmware versions 11.04 and earlier.

What to do

An attacker lurking on the same network segment could exploit this vulnerability to crash your printer, causing chaos in the office. If they're really clever, they might even execute code that compromises your network! That's absolutely devastating for anyone relying on these printers for day-to-day business operations. To secure your printers, upgrade to the latest firmware versions as soon as possible and review your network segment security protocols to limit access. Regularly check for updates and patches to keep your devices fortified against attacks. You've got this! By taking these steps, you’re one step closer to securing your network and achieving hero status! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01139 · 66.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2023-05-11T00:00Z
EPSS history
Timeline
  • 11 MAY 00:00Z
    Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the…
    cvelistv5