CVE-2024-0244CWE-787

Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…

Critical · published February 6, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

🚨 A crafty buffer overflow lurks in the CPCA PCFAX process of certain Office Multifunction Printers, ready to cause mayhem! 🔥 Think of it as a crowded elevator that suddenly stops working because someone tried to squeeze in one too many people—now nobody can get off safely. That's what happens when an attacker exploits this vulnerability! An attacker on the same network segment could trigger the printer to become unresponsive or, even worse, execute arbitrary code. This could lead to unauthorized access or control over the affected devices, potentially compromising sensitive information and disrupting workflows. It's a recipe for chaos!

Put simply

Think of it as a crowded elevator that suddenly stops working because someone tried to squeeze in one too many people—now nobody can get off safely. That's what happens when an attacker exploits this vulnerability! This vulnerability allows for buffer overflow in the CPCA PCFAX number processing, affecting multiple printer models and enabling attackers to manipulate the printer's memory. When the overflow occurs, it may lead to system crashes or arbitrary code execution, putting your network at risk.

What to do

An attacker on the same network segment could trigger the printer to become unresponsive or, even worse, execute arbitrary code. This could lead to unauthorized access or control over the affected devices, potentially compromising sensitive information and disrupting workflows. It's a recipe for chaos! Immediately update the firmware of affected printer models—specifically, versions v03.07 and earlier for the Satera MF750C, Color imageCLASS MF750C Series, Color imageCLASS X MF1333C Series, and i-SENSYS MF754Cdw/C1333iF. Ensure that all network security measures are in place to limit unauthorized access. 🛡️ You've got this! By taking these actions, you're one step closer to securing your devices from potential threats. 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01383 · 72.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-02-06T00:24Z
EPSS history
Timeline
  • 06 FEB 00:24Z
    Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
    cvelistv5