CVE-2023-0856CWE-121

Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network…

Critical · published May 11, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow can turn your trusted printer into a paperweight! Think of it like a coffee machine that overflows its reservoir — if too much is pumped in without managing the flow, it spills everywhere and breaks down. Similarly, this flaw allows attackers on the network segment to flood the printer’s memory, leading to crashes or worse. An attacker could exploit this vulnerability to crash the printer, rendering it completely unresponsive or even worse, execute arbitrary code! Imagine having your office printer hijacked to run malicious tasks, potentially compromising your entire network. This could lead to data breaches or loss of productivity — absolutely devastating!

Put simply

Think of it like a coffee machine that overflows its reservoir — if too much is pumped in without managing the flow, it spills everywhere and breaks down. Similarly, this flaw allows attackers on the network segment to flood the printer’s memory, leading to crashes or worse. This critical buffer overflow vulnerability exists in the IPP sides attribute process of various multifunction printers, specifically affecting firmware version 11.04 and earlier. When exploited, it can allow an attacker on the same network to manipulate memory and execute arbitrary code.

What to do

An attacker could exploit this vulnerability to crash the printer, rendering it completely unresponsive or even worse, execute arbitrary code! Imagine having your office printer hijacked to run malicious tasks, potentially compromising your entire network. This could lead to data breaches or loss of productivity — absolutely devastating! To protect your devices, immediately update the printer firmware to a version after 11.04. Regularly check for updates and patch them as they come out. Additionally, consider segmenting your network to limit access to untrusted users. You've got this! Follow these steps to secure your printers and keep your network safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01139 · 66.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2023-05-11T00:00Z
EPSS history
Timeline
  • 11 MAY 00:00Z
    Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network…
    cvelistv5