CVE-2023-6231CWE-787

Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…

Critical · published February 6, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

🔥 A buffer overflow in your Office Multifunction Printer could let attackers turn your device into a paperweight or worse – all from the same network! ⚠️ Think of it as a waiter who miscalculates the orders, leading to a kitchen explosion! When too much data is stuffed into a buffer, it spills out, causing chaos in the printer's operations. An attacker could disrupt your printing services entirely, leaving your devices unresponsive or, even more alarmingly, execute arbitrary code. This means they could potentially take control of your printer, leading to unauthorized access to sensitive information being printed or processed. Yikes!

Put simply

Think of it as a waiter who miscalculates the orders, leading to a kitchen explosion! When too much data is stuffed into a buffer, it spills out, causing chaos in the printer's operations. This vulnerability arises from a buffer overflow during the WSD probe request process in various models of Office Multifunction Printers and Laser Printers, specifically versions v03.07 and earlier. This flaw allows attackers to exploit the overflow, resulting in the device crashing or executing unwanted code.

What to do

An attacker could disrupt your printing services entirely, leaving your devices unresponsive or, even more alarmingly, execute arbitrary code. This means they could potentially take control of your printer, leading to unauthorized access to sensitive information being printed or processed. Yikes! To protect your devices, immediately update to the latest firmware version beyond v03.07. Additionally, consider segmenting your network to limit access to printers only to trusted users. Regularly audit your printer configurations for any vulnerabilities. You've got this! With these steps, your printers will be safeguarded and ready to serve securely! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01383 · 72.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-02-06T00:22Z
EPSS history
Timeline
  • 06 FEB 00:22Z
    Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
    cvelistv5