CVE-2024-12648

Summary

CVE-2024-12648 is a buffer overflow vulnerability affecting TIFF data EXIF tag processing in certain Small Office Multifunction Printers and Laser Printers, including Satera MF656Cdw, Satera MF654Cdw, Color imageCLASS MF656Cdw, Color imageCLASS MF654Cdw, Color imageCLASS MF653Cdw, Color imageCLASS MF652Cdw, i-SENSYS MF657Cdw, i-SENSYS MF655Cdw, i-SENSYS MF651Cdw, i-SENSYS LBP633Cdw, and i-SENSYS LBP631Cdw. This issue can be exploited by an attacker on the same network segment to cause the affected product to become unresponsive or even execute arbitrary code. The vulnerability exists in firmware version 05.04 and earlier, which was sold in Japan, the US, and Europe.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.