CVE-2025-2146CWE-787

Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network…

Critical · published May 25, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow in small office printers could turn your trusty multifunction device into a complete paperweight! 🔥 This vulnerability is like a crowded restaurant kitchen where one wrong recipe can cause chaos—an overflowing pot leads to all the burners shutting off, and nobody can serve customers. In this case, an attacker can exploit the printer to either freeze it up or run their own code! If exploited, an attacker on the same network segment could cause the printer to become unresponsive, potentially disrupting your entire office's workflow. Even worse, they could execute arbitrary code, which means they might gain further access to your network systems—absolutely devastating!

Put simply

This vulnerability is like a crowded restaurant kitchen where one wrong recipe can cause chaos—an overflowing pot leads to all the burners shutting off, and nobody can serve customers. In this case, an attacker can exploit the printer to either freeze it up or run their own code! This buffer overflow occurs during the authentication processing of affected Small Office Multifunction Printers and Laser Printers, allowing attackers to manipulate memory and execute malicious commands.

What to do

If exploited, an attacker on the same network segment could cause the printer to become unresponsive, potentially disrupting your entire office's workflow. Even worse, they could execute arbitrary code, which means they might gain further access to your network systems—absolutely devastating! Immediately identify if you are using one of the affected printer models running firmware v05.07 or earlier. Upgrade to the latest firmware version to patch this critical vulnerability and ensure that your network remains secure! You've got this! Stay vigilant and keep your printers protected! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00915 · 59.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-05-25T23:36Z
EPSS history
Timeline
  • 25 MAY 23:36Z
    Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network…
    cvelistv5