[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBCM1l6lgzmgh49Vm5Jq-KEPTyXhK9lxJrgfx9uQ6iEg":3,"g5a-ex:canon\u002Fmf644cdw_firmware@*":91,"g5a-family:canon\u002Fmf644cdw_firmware":93},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":68,"seoMetadata":69,"meta":88},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"canon","mf644cdw_firmware",2,13,0,"2023-05-11",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10.03",1,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"11.04","Mf644cdw Firmware by Canon is a technology product with 2 tracked versions and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},[25,33,39,43,46,50,53,56,59,63],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":32},"CVE-2022-24673","This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15845.","2023-03-28",9.8,"v3.1","Critical",0.02628,{"cveId":34,"description":35,"publishedDate":28,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":17,"epssScore":38},"CVE-2022-24672","This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CADM service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-15802.",8.8,"High",0.01194,{"cveId":40,"description":41,"publishedDate":12,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":42},"CVE-2023-0853","Buffer overflow in mDNS NSEC record registering process of Office \u002F Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series\u002FLBP 620C Series\u002FX LBP1127C\u002FMF740C Series\u002FMF640C Series\u002FX MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.",0.01163,{"cveId":44,"description":45,"publishedDate":12,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":42},"CVE-2023-0854","Buffer overflow in NetBIOS QNAME registering and communication process of Office \u002F Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series\u002FLBP 620C Series\u002FX LBP1127C\u002FMF740C Series\u002FMF640C Series\u002FX MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.",{"cveId":47,"description":48,"publishedDate":12,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":49},"CVE-2023-0851","Buffer overflow in CPCA Resource Download process of Office \u002F Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series\u002FLBP 620C Series\u002FX LBP1127C\u002FMF740C Series\u002FMF640C Series\u002FX MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.",0.01139,{"cveId":51,"description":52,"publishedDate":12,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":49},"CVE-2023-0852","Buffer overflow in the Address Book of Mobile Device function of Office \u002F Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series\u002FLBP 620C Series\u002FX LBP1127C\u002FMF740C Series\u002FMF640C Series\u002FX MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.",{"cveId":54,"description":55,"publishedDate":12,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":49},"CVE-2023-0855","Buffer overflow in IPP number-up attribute process of Office \u002F Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series\u002FLBP 620C Series\u002FX LBP1127C\u002FMF740C Series\u002FMF640C Series\u002FX MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.",{"cveId":57,"description":58,"publishedDate":12,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":49},"CVE-2023-0856","Buffer overflow in IPP sides attribute process of Office \u002F Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series\u002FLBP 620C Series\u002FX LBP1127C\u002FMF740C Series\u002FMF640C Series\u002FX MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series\u002FLBP620C Series\u002FMF740C Series\u002FMF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.",{"cveId":60,"description":61,"publishedDate":28,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":17,"epssScore":62},"CVE-2022-24674","This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15834.",0.0111,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":17,"epssScore":67},"CVE-2022-43608","This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the BJNP service. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-16032.","2023-03-29",0.0083,[],{"title":70,"metaDescription":71,"keywords":72,"structuredData":73},"Mf644cdw Firmware by Canon - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mf644cdw Firmware by Canon covering 2 versions with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mf644cdw Firmware vulnerabilities, Mf644cdw Firmware security, Mf644cdw Firmware CVE, Canon Mf644cdw Firmware, Mf644cdw Firmware threat intelligence, Canon security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":74,"@type":75,"name":76,"description":71,"url":77,"manufacturer":78,"applicationCategory":82,"softwareVersion":83,"mainEntity":84},"https:\u002F\u002Fschema.org","SoftwareApplication","Mf644cdw Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcanon\u002Fmf644cdw_firmware",{"@type":79,"name":80,"url":81},"Organization","Canon","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcanon","Security Software","2 versions tracked",{"@type":85,"name":86,"description":87,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Mf644cdw Firmware Security Vulnerabilities","Security vulnerabilities affecting Mf644cdw Firmware by Canon",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":89,"apiVersion":90},"2026-10-18T20:40:28.566Z","3.0",{"rows":92,"total":11,"capped":17,"failed":11},[],[]]