s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

CVE-2023-0851

📛 CVE Title

CVE-2023-0851

⬇ Download JSON ⚠ View as Threat

Description

Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

Overview

State
PUBLISHED
Assigner (CNA)
Canon
CVSS severity
CRITICAL
CVSS score
CVSS 9.8 / 10 9.8 9.8 / 10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Effective score
9.8 / 10 CRITICAL source: CNA overview
CWE(s)
CWE-122
Reserved
2023-02-16
Published
2023-05-11 02:00 UTC
Last updated
2025-02-10 21:58 UTC
Source
https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/0xxx/CVE-2023-0851.json
Linked Threat
CVE-2023-0851 — CVE-2023-0851

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published
2023-05-11 13:15:11 UTC
NVD last modified
2026-06-17 05:26:27 UTC
NVD CVSS v3.1
CVSS 9.8 / 10 9.8 9.8 / 10 CRITICAL source: f98c90f0-e9bd-4fa7-911b-51993f3571fd
NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability subscore
3.9 / 10
Impact subscore
5.9 / 10
EPSS score
0.0114 (probability of exploitation in next 30 days)
EPSS percentile
63.35% vs all CVEs — higher = more likely to be exploited, as of 2026-07-29

NVD-assigned CWE(s): CWE-122, CWE-787 (differs from the CNA list above)

NVD / KEV / EPSS data refreshed 2026-07-30 12:39 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID
EUVD-2023-12849
Assigner
Canon
Published
May 11, 2023, 12:00:00 AM
Updated
Feb 10, 2025, 8:58:11 PM
EUVD base score (CVSS 3.1)
9.8 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EUVD-reported EPSS
0.5100
Vendors
Canon Inc.
Products
Canon Office/Small Office Multifunction Printers and Laser Printers (Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.)
Aliases
GHSA-2wph-5668-pjw8

ENISA description: Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

EUVD references (4)

Affected products (1)
VendorProductVersionsPlatforms
Canon Inc. Canon Office/Small Office Multifunction Printers and Laser Printers Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. (affected) —

Affected products — CPE 2.3 (90) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

  • cpe:2.3:o:canon:mf642cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf642cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf644cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf644cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf741cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf741cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf743cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf743cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf745cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf745cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp621c_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp621c:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp622c_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp622c:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp661c_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp661c:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp662c_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp662c:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp664c_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp664c:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf1127c_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf1127c:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf262dw_ii_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf262dw_ii:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf264dw_ii_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf264dw_ii:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf267dw_ii_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf267dw_ii:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf269dw_ii_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf269dw_ii:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf269dw_vp_ii_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf269dw_vp_ii:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf272dw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf272dw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf273dw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf273dw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf275dw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf275dw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf641cw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf641cw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:mf746cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:mf746cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp122dw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp122dw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp1127c_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp1127c:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp622cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp622cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp623cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp623cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:lbp664cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:lbp664cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:imageprograf_tc-20_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:imageprograf_tc-20:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:imageprograf_tc-20m_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:imageprograf_tc-20m:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:pixma_g3270_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:pixma_g3270:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:pixma_g4270_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:pixma_g4270:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:maxify_gx3020_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:maxify_gx3020:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:maxify_gx4020_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:maxify_gx4020:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_lbp621cw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_lbp621cw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_lbp623cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_lbp623cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_lbp633cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_lbp633cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_lbp664cx_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_lbp664cx:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_mf641cw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_mf641cw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_mf643cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_mf643cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_mf645cx_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_mf645cx:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_mf742cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_mf742cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_mf744cdw_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_mf744cdw:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_mf746cx_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_mf746cx:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_x_c1127i_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_x_c1127i:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_x_c1127if_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_x_c1127if:-:*:*:*:*:*:*:*
  • cpe:2.3:o:canon:i-sensys_x_c1127p_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:canon:i-sensys_x_c1127p:-:*:*:*:*:*:*:*

Vendor references (4)

References embedded in the original CVE record by the assigning CNA.

MITRE references (4) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

NVD-tagged references (8)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

Remediations (18)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

  • Microsoft Releases KB5089573 for Windows 11 to Fix Patch Tuesday ...
    web:cybersecuritynews.com

    Microsoft has rolled out a new cumulative update, KB5089573, for Windows 11 versions 25H2 and 24H2, targeting a critical installation failure that affected users following the May 2026 Patch Tuesday release.

    2026-06-02 08:20 UTC
  • Hotpatch updates | Microsoft Learn
    web:learn.microsoft.com

    Hotpatch updates streamline the installation process and enhance compliance efficiency. No changes are required to your existing update ring configurations. Your existing ring configurations are honored alongside Hotpatch policies. The Hotpatch quality update report provides a per policy level view of the current update statuses for all devices that receive Hotpatch updates. Hotpatch package ...

    2026-06-02 08:20 UTC
  • Release notes for Hotpatch on Windows 11 Enterprise version 25H2
    web:support.microsoft.com

    Hotpatch for Windows 11 Enterprise, version 25H2 gives organizations the ability to apply security updates without requiring a device restart. This helps maintain security while keeping workflows uninterrupted. Hotpatch is an extension of Windows Update and requires Autopatch to create and deploy updates to devices enrolled in the Autopatch quality update policy. Benefits include: Immediate ...

    2026-06-02 08:20 UTC
  • Vulnerability Patching: Why It's Critical & How to Do It Right
    web:tuxcare.com

    It includes discovering vulnerabilities, evaluating their potential impact, prioritizing remediation efforts (including patching), and confirming the fixes. Patch Management Patch management, on the other hand, is the act of applying the necessary updates to fix known vulnerabilities. It's a critical component of vulnerability management.

    2026-06-02 08:20 UTC
  • Microsoft releases Windows 11 OOB hotpatch to fix RRAS RCE flaw
    web:www.bleepingcomputer.com

    Microsoft has released an out-of-band (OOB) update to fix a security vulnerabilities affecting Windows 11 Enterprise devices that receive hotpatch updates instead of the regular Patch Tuesday ...

    2026-06-02 08:20 UTC
  • 2023 Top Routinely Exploited Vulnerabilities - CISA
    web:www.cisa.gov

    For patch information on CVEs identified in this advisory, refer to the Appendix: Patch Information and Additional Resources for Top Exploited Vulnerabilities. If a patch for a KEV or critical vulnerability cannot be quickly applied, implement vendor-approved workarounds.

    2026-06-02 08:20 UTC
  • Software Patching Best Practices: Don't Skip Updates | Infosec
    web:www.infosecinstitute.com

    You can treat vulnerabilities in three ways: Remediate: Apply the patch or update to the software or system, so it's safe from exploitation. Mitigate: If remediation isn't an option because there is no patch or there are issues in updating the applications, then you move to mitigate.

    2026-06-02 08:20 UTC
  • Security Update Guide FAQs - microsoft.com
    web:www.microsoft.com

    These Knowledge Base articles accompany all security updates and advisories, and include caveats or known issues with security updates. Additionally, support engineers document common concerns from customers in these KB articles. These Knowledge Base articles are published the Security Update Guide with each release on Patch Tuesday.

    2026-06-02 08:20 UTC
  • Microsoft resolves Windows 11 update error as CISA orders urgent ... - MSN
    web:www.msn.com

    Windows 11 patch fix : Microsoft resolved May 2026 update failures tied to limited EFI partition space with automated rollback, IT admin workarounds, and registry-based adjustments. Exchange flaw ...

    2026-05-22 05:36 UTC
  • THE FIX (@thefixza) • Instagram photos and videos
    web:www.instagram.com

    804K Followers, 26 Following, 6,243 Posts - THE FIX (@thefixza) on Instagram: "#DOWHATSRIGHT Shop on Bash.com Tag your OOTD #THEFIXDrip #THEFIXDenimDrip"

    2026-05-22 05:36 UTC
  • Microsoft Rushes Out Emergency Mitigation For 'YellowKey ... - LinkedIn
    web:www.linkedin.com

    Microsoft Security Response Center has issued an emergency mitigation for a newly disclosed BitLocker bypass vulnerability known as "YellowKey," after security researchers publicly released ...

    2026-05-22 05:36 UTC
  • Microsoft Releases Mitigation for Windows BitLocker Security Bypass 0 ...
    web:cybersecuritynews.com

    Microsoft has disclosed a critical zero-day vulnerability in Windows BitLocker, tracked as CVE -2026-45585, that allows threat actors with physical access to bypass full-disk encryption entirely, potentially exposing sensitive data within minutes.

    2026-05-22 05:36 UTC
  • Pennsylvania Access To Criminal History - Home
    web:epatch.pa.gov

    Why does PATCH exist? Its purpose is to better enable the public to obtain criminal history record checks. The repository was created and is maintained in accordance with Pennsylvania's Criminal History Information Act contained in Chapter 91 of Title 18, Crimes Code. This Act also directs the Pennsylvania State Police (PSP) to disseminate criminal history data to criminal justice agencies ...

    2026-05-22 05:36 UTC
  • Windows Zero-Day Barrage Continues After Patch Tuesday
    web:www.darkreading.com

    Windows Zero-Day Barrage Continues After Patch Tuesday YellowKey, GreenPlasma, and MiniPlasma add to the growing list of vulnerabilities a security researcher disclosed over the past six weeks.

    2026-05-22 05:36 UTC
  • Patch - Everything Local: Breaking News, Events, Discussions
    web:patch.com

    The best breaking news, stories, and events from the Patch network of local news sites

    2026-05-22 05:36 UTC
  • patch.moe - Age Verification
    web:patch.moe

    Age Verification Are you 18 years or older? YES NO

    2026-05-22 05:36 UTC
  • Enterprise Deployment Guidance for CVE-2023-24932
    web:support.microsoft.com

    For information about how to apply Mitigation 1 and Mitigation 2 in two separate steps (if you want to be more cautious, at least at first) see KB5025885: How to manage the Windows boot manager revocations for Secure Boot changes associated with CVE - 2023 -24932.

    2026-05-22 05:36 UTC
  • Concord NH Patch - Facebook
    web:www.facebook.com

    Concord NH Patch . 44,188 likes · 3,578 talking about this. Hyperlocal news, alerts, discussions and events for Concord, NH

    2026-05-22 05:36 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2023-0851.json.

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:24:34.539Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.canon-europe.com/support/product-security-latest-news/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://psirt.canon/advisory-information/cp2023-001/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://canon.jp/support/support-info/230414vulnerability-response"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-0851",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-10T20:57:59.650498Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-10T20:58:11.734Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Canon Office/Small Office Multifunction Printers and Laser Printers",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-11T00:00:00.000Z",
        "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "shortName": "Canon"
      },
      "references": [
        {
          "url": "https://www.canon-europe.com/support/product-security-latest-news/"
        },
        {
          "url": "https://psirt.canon/advisory-information/cp2023-001/"
        },
        {
          "url": "https://canon.jp/support/support-info/230414vulnerability-response"
        },
        {
          "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
    "assignerShortName": "Canon",
    "cveId": "CVE-2023-0851",
    "datePublished": "2023-05-11T00:00:00.000Z",
    "dateReserved": "2023-02-16T00:00:00.000Z",
    "dateUpdated": "2025-02-10T20:58:11.734Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}