CVE-2023-0854

CVE-2023-0854 is a critical buffer overflow vulnerability affecting specific Canon Office / Small Office Multifunction Printers and Laser Printers, including various Satera, imageCLASS, and i-SENSYS models with firmware version 11.04 and earlier. This flaw, residing in the NetBIOS QNAME registering and communication process, allows an unauthenticated attacker on the same network segment to render the device unresponsive or execute arbitrary code. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction, leading to complete compromise of confidentiality, integrity, and availability. Currently, there is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.