CVE-2023-0855CWE-121

Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the…

Critical · published May 11, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

🚨 A simple misstep in printer firmware could knock your device offline or let attackers run wild! Think of it like a fuse in a power strip: if it gets overloaded, it can trip and shut everything down, or worse, cause chaos by creating unexpected connections. That’s what this buffer overflow does to your printer! An attacker on the same network segment could exploit this vulnerability to make your printer unresponsive or even execute arbitrary code, thus potentially opening the door to further attacks on your network. This could lead to unauthorized access to sensitive documents or compromise the entire printing ecosystem!

Put simply

Think of it like a fuse in a power strip: if it gets overloaded, it can trip and shut everything down, or worse, cause chaos by creating unexpected connections. That’s what this buffer overflow does to your printer! This buffer overflow vulnerability exists in the IPP number-up attribute process of specific Office and Small Office Multifunction Printers and Laser Printers. It allows for the manipulation of input data, leading to erratic behavior or arbitrary code execution.

What to do

An attacker on the same network segment could exploit this vulnerability to make your printer unresponsive or even execute arbitrary code, thus potentially opening the door to further attacks on your network. This could lead to unauthorized access to sensitive documents or compromise the entire printing ecosystem! Immediately update your printer firmware to the latest versions provided by the manufacturer. For affected models, ensure you're running firmware beyond version 11.04 to prevent exploitation. Regularly audit your network for unauthorized access and apply network segmentation where possible to isolate these devices. You've got this! Follow these steps, and you'll keep your printers safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01139 · 66.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2023-05-11T00:00Z
EPSS history
Timeline
  • 11 MAY 00:00Z
    Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the…
    cvelistv5