Regarding Vulnerability Measure Against Buffer Overflow for Laser Printers and Small Office Multifunction Printers (CVE-2022-43608) - Canon Singapore

12 Dec 2022

    Regarding Vulnerability Measure Against Buffer Overflow for Laser Printers and Small Office Multifunction Printers (CVE-2022-43608)

    Thank you for using Canon Products.

    A buffer overflow vulnerability has been detected for Canon Laser Printers and Small Office Multifunction Printers listed under Affected Models below. (CVE-2022-43608)

    This vulnerability suggests the possibility that if a product is connected directly to the Internet without using a router (wired or Wi-Fi), a party may be able to execute arbitrary code and/or subject the product to Denial-of Service (DoS) attack.

    There have been no reports of damage relating to this vulnerability. However, to enhance the security of the product, we advise customers to install the latest firmware available for the Affected Models provided below.

    We also recommend customers to set a private IP address for the products and create a network environment with a firewall or Wired/Wi-Fi router that can restrict network access.

    For more details on securing products when connected to a network, please visit here.

    Affected Models:

    imageCLASS LBP621Cw
    imageCLASS LBP623Cdw
    imageCLASS LBP664Cx
    imageCLASS MF641Cw
    imageCLASS MF642Cdw
    imageCLASS MF643Cdw
    imageCLASS MF644Cdw
    imageCLASS MF645Cx
    imageCLASS MF746Cx

    Please click here for latest firmware available for the Affected Models.

    We continue to review and strengthen security measures for our products to ensure that customers can continue using Canon products with peace of mind.

    Contact Information for Inquiries:
    Please contact your nearest service centre if you have any queries.

    First Posted on 12 Dec 2022