PT-2025-1924

CVE-2024-12647

·

Published

2025-01-28

·

Updated

2026-01-26

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Satera MF656Cdw/Satera MF654Cdw versions v05.04 and earlier Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw versions v05.04 and earlier i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw versions v05.04 and earlier
Description A buffer overflow issue exists in the CPCA font download processing of certain Small Office Multifunction Printers and Laser Printers. This may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.
Recommendations Satera MF656Cdw/Satera MF654Cdw versions v05.04 and earlier: Update the firmware to a version later than v05.04. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw versions v05.04 and earlier: Update the firmware to a version later than v05.04. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw versions v05.04 and earlier: Update the firmware to a version later than v05.04.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ZDI-25-073
Found an issue in the description? Have something to add? Feel free to write us 👾