Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-29546 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15834. |
Wed, 19 Feb 2025 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Subscriptions
Status: PUBLISHED
Assigner: zdi
Published:
Updated: 2025-02-19T15:37:21.554Z
Reserved: 2022-02-08T00:00:00.000Z
Link: CVE-2022-24674
Updated: 2024-08-03T04:20:49.145Z
Status : Modified
Published: 2023-03-28T19:15:10.867
Modified: 2024-11-21T06:50:50.587
Link: CVE-2022-24674
No data.
OpenCVE Enrichment
No data.
EUVD