CVE-2024-2184CWE-787

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on…

Critical · published March 11, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

🚨 A buffer overflow in multifunction printers could have devastating consequences! An attacker within the same network segment can trigger unresponsiveness or even execute arbitrary code. 🔥 Think of this like a crowded restaurant where the waitstaff keeps bringing in more and more orders without checking if they have enough space on the kitchen counter. Eventually, the counter overflows, and chaos ensues! Similarly, this vulnerability is caused by too much data being crammed into a field, leading to system instability. An attacker could exploit this vulnerability to crash the affected printers, making them unresponsive or, even worse, execute malicious code on the printer itself! This means sensitive business documents could be at risk or even worse, unauthorized access to the network could occur. It's a recipe for disaster!

Put simply

Think of this like a crowded restaurant where the waitstaff keeps bringing in more and more orders without checking if they have enough space on the kitchen counter. Eventually, the counter overflows, and chaos ensues! Similarly, this vulnerability is caused by too much data being crammed into a field, leading to system instability. This buffer overflow vulnerability exists in the identifier field of WSD probe request processes on specific models of Small Office Multifunction Printers and Laser Printers. It allows the potential execution of arbitrary code due to the mishandling of data input lengths, making it a critical security concern.

What to do

An attacker could exploit this vulnerability to crash the affected printers, making them unresponsive or, even worse, execute malicious code on the printer itself! This means sensitive business documents could be at risk or even worse, unauthorized access to the network could occur. It's a recipe for disaster! To protect your devices, patch immediately to the latest firmware versions: v12.08 for the Satera models and v03.10 for the Color imageCLASS and i-SENSYS series. Ensure that all network access is limited to authorized users only and consider implementing additional network segmentation as a precaution. 🛡️ You've got this! Stay ahead of the threat by following these steps, and keep your network secure! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00815 · 56.6th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-03-11T00:26Z
EPSS history
Timeline
  • 11 MAR 00:26Z
    Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on…
    cvelistv5