[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwQv_YnG1OJleHlsFx1sVketPu5ADESu1rwzL2NjMSLg":3,"g5a-risk:CVE-2022-43608":117},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":62,"weaknessesCount":71,"isActivelyExploited":72,"cisaInfo":26,"otxData":26,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":112,"notableEvents":113},"CVE-2022-43608","What is CVE-2022-43608?","This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the BJNP service. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-16032.","This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 printers. Authent...","2023-03-29T19:15:18.29","2023-04-08T01:56:46.863",8.8,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"zdi-disclosures@trendmicro.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",0.0083,[36,36,36,36,36,36,36],"High",[40,45],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"canon","mf644cdw_firmware","10.03","cpe:2.3:o:canon:mf644cdw_firmware:10.03:*:*:*:*:*:*:*",{"vendor":41,"product":46,"version":47,"criteria":48,"vulnerable":4},"mf644cdw","-","cpe:2.3:h:canon:mf644cdw:-:*:*:*:*:*:*:*",2,[51,56],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fwww.psirt.canon\u002Fadvisory-information\u002Fcve-2022-43608_20221125","Psirt",[55],"Vendor Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-22-1666\u002F","Zerodayinitiative",[60,61],"Third Party Advisory","VDB Entry",[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","","Stable","Base","Simple",1,false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2022-43608? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-43608, a high severity cyber security vulnerability from 2023. This vulnerability allows network-adjacent attackers to exe...","CVE-2022-43608, CVE-2022-43608 vulnerability, CVE-2022-43608 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, canon security, mf644cdw_firmware vulnerability, mf644cdw vulnerability","\u002Fwhat-is\u002Fcve-2022-43608",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-43608","Cybersecurity","CVE-2022-43608, CVE-2022-43608 vulnerability, CVE-2022-43608 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":101,"Negate":26,"Nodes":102},"AND",[103,108],{"Operator":104,"Negate":26,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4829DE46-58F3-493D-904D-48C8BD43C29E",{"Operator":104,"Negate":26,"CPEMatch":109},[110],{"Vulnerable":26,"Criteria":48,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AC602D53-5FD1-4F62-9431-AEAC6076C0C3",[],[],{"lastModified":11,"cacheTime":115,"version":116},1792368020731,"2.0",{"score":118,"band":119,"action":120,"scoredAt":121},47,"Medium","Plan remediation","2026-10-16T06:57:36.066326+00:00"]