NetSight
IP …
critical9.8

CVE-2025-14233

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment t…

Impact

Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.

Affected products

VendorProductAffected versions
CanonLbp1238 Ii Firmware
through 06.02
CanonLbp632cdw Firmware
through 06.02
CanonLbp633cdw Firmware
through 06.02
CanonLbp236dw Firmware
through 06.02
CanonLbp237dw Firmware
through 06.02
CanonMf1643i Ii Firmware
through 06.02
CanonMf1643if Ii Firmware
through 06.02
CanonMf1238 Ii Firmware
through 06.02
CanonMf652cw Firmware
through 06.02
CanonMf653cdw Firmware
through 06.02
CanonMf656cdw Firmware
through 06.02
CanonMf654cdw Firmware
through 06.02

Weakness classification

CWE-763

References