CVE-2023-0857 - CVE House
Back to Database
Status published Medium CVE-2023-0857

Unintentional change of settings during initial registration of system administrators...

Vulnerability Description

Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0857

Credits & Attribution

No credits recorded in the NVD database.

References

More from Canon Inc.

View All →
CVE-2025-9904
Unallocated memory access vulnerability in print processing of Generic Plus...
Medium 6.9
CVE-2025-9903
Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6...
Medium 5.9
CVE-2025-7698
Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6...
Medium 5.9
CVE-2025-3079
A passback vulnerability which relates to office/small office multifunction printers...
Medium 6.3
CVE-2025-3078
A passback vulnerability which relates to production printers and office...
Medium 6.3

Affected Vendor

Affected Software

Canon Office/Small Office Multifunction Printers and Laser Printers
Vulnerable Versions:
Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.

Timeline

Official Publish: May 11th, 2023
Last Modified: January 24th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-286

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.