CVE Tools
Sign in

CVE-2023-0859

Published: May 11, 2023Updated: Nov 21, 2024 Sources: CVE List NVDCWE-1285
2.2LOW
NVD MITRE
EPSS Score
0.5%
Top 57.3%
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
No Fix Available
Self-Check
Not available

Description

Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

No summary for this CVE yet.

CVSS Vector Breakdown

AV:NAC:HPR:HUI:NS:UC:NI:LA:N
Exploitability
AV:NAttack Vector
Network
AC:HAttack Complexity
High
PR:HPrivileges Required
High
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:NConfidentiality
None
I:LIntegrity
Low
A:NAvailability
None
Open in CVSS calculator →

Weaknesses

CWE-1285NVD-CWE-noinfo

Affected Products

canon
commercial·JPaka canon inc.
mf642cdw firmware
Hardware Firmware
mf644cdw firmware
Hardware Firmware
mf741cdw firmware
Hardware Firmware
mf743cdw firmware
Hardware Firmware
mf745cdw firmware
Hardware Firmware
lbp621c firmware
Hardware Firmware
lbp622c firmware
Hardware Firmware
lbp661c firmware
Hardware Firmware
Canon Inc.
commercial·JPaka canon
Canon Office/Small Office Multifunction Printers and Laser Printers
Hardware Firmware
and 37 more affected products View all →

Exploitability

No known exploits, KEV entries, or remediation guidance available for this vulnerability yet.

References

https://www.canon-europe.com/support/product-security-latest-news/
canon-europe.com
https://psirt.canon/advisory-information/cp2023-001/
psirt.canon
https://canon.jp/support/support-info/230414vulnerability-response
canon.jp
and 1 more references View all →

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2023-0859 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows