CVE-2024-2184

CVE-2024-2184 is a critical buffer overflow vulnerability affecting various Canon Small Office Multifunction and Laser Printers, including specific Satera, Color imageCLASS, and i-SENSYS series models with outdated firmware. An unauthenticated attacker on the same network segment can exploit this flaw by sending a crafted WSD probe request, leading to denial-of-service or arbitrary code execution on the affected device. Rated with a CVSS score of 9.8 (Critical), this vulnerability requires no user interaction and has a low attack complexity, allowing for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is currently unavailable. Despite the lack of active exploitation or public exploits, the vulnerability has garnered some community discussion, with 10 mentions across various platforms. Organizations are advised to update affected devices to the latest firmware versions to mitigate this significant risk.