CVE-2023-0851

CVE-2023-0851 describes a critical buffer overflow vulnerability in the CPCA Resource Download process of various Canon Office/Small Office Multifunction Printers and Laser Printers. This flaw, affecting firmware versions 11.04 and earlier, allows an unauthenticated attacker on the network segment to trigger a denial of service or execute arbitrary code. With a CVSS score of 9.8 (Critical), it presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.