CVE-2023-0852CWE-121

Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker…

Critical · published May 11, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

🚨 A simple buffer overflow in your office printer could cause it to freeze up or even run rogue code! 🔥 Think of your printer as a busy restaurant kitchen. If the chef gets an order that’s too big for the pot, it can spill everywhere, causing chaos and halting all food production. That’s what happens here when the Address Book function receives too much data. An attacker on your network could exploit this vulnerability to crash the printer or take control of it, potentially leading to unauthorized access to sensitive information. It’s like giving a stranger the keys to your establishment — they could wreak havoc and mess with everything!

Put simply

Think of your printer as a busy restaurant kitchen. If the chef gets an order that’s too big for the pot, it can spill everywhere, causing chaos and halting all food production. That’s what happens here when the Address Book function receives too much data. This vulnerability occurs in the Address Book feature of certain multifunction and laser printers, allowing attackers to trigger a buffer overflow that leads to an unresponsive state or arbitrary code execution.

What to do

An attacker on your network could exploit this vulnerability to crash the printer or take control of it, potentially leading to unauthorized access to sensitive information. It’s like giving a stranger the keys to your establishment — they could wreak havoc and mess with everything! Update your firmware immediately to version 11.05 or later to close this critical gap. Don’t forget to check and restrict network access to the printer to limit exposure until the patch is applied. 🛡️ You’ve got this! Act now, and your printer will be safe and sound in no time! 😄

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01139 · 66.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2023-05-11T00:00Z
EPSS history
Timeline
  • 11 MAY 00:00Z
    Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker…
    cvelistv5