CVE-2024-0244
published 2024-02-06CVE-2024-0244: Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to…
PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.64%
76.2th percentile
Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*:Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS MF750C Series/Color imageCLASS X MF1333C firmware v03.07 and earlier sold in US. i-SENSYS MF754Cdw/C1333iF firmware v03.07 and earlier sold in Europe.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canon | i-sensys_mf754cdw_firmware | <= 03.07 | — |
| canon | i-sensys_x_c1333if_firmware | <= 03.07 | — |
| canon | lbp1333c_firmware | <= 03.07 | — |
| canon | mf1333c_firmware | <= 03.07 | — |
| canon | mf751cdw_firmware | <= 03.07 | — |
| canon | mf753cdw_firmware | <= 03.07 | — |
| canon | mf755cdw_firmware | <= 03.07 | — |
| canon_inc | c1333if | — | — |
| canon_inc | color_imageclass_mf750c_series | — | — |
| canon_inc | color_imageclass_x_mf1333c | — | — |
| canon_inc | i-sensys_mf754cdw | — | — |
| canon_inc | satera_mf750c_series | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →The vulnerability is a buffer overflow in the CPCA PCFAX number processing component of Canon multifunction/laser printers. Detection should focus on anomalous or oversized PCFAX number fields in network traffic targeting affected Canon printer models. ↗
- →Attack vector is network-segment local (adjacent network); monitor for unexpected traffic or crash/unresponsive behavior on Canon Satera MF750C Series, Color imageCLASS MF750C Series/X MF1333C, and i-SENSYS MF754Cdw/C1333iF devices. ↗
- ·Affected firmware versions are v03.07 and earlier across three regional product lines: Satera MF750C Series (Japan), Color imageCLASS MF750C Series/Color imageCLASS X MF1333C (US), and i-SENSYS MF754Cdw/C1333iF (Europe). Scope detection/patching efforts to these specific firmware versions. ↗
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
arXiv
ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMs
arxiv_fulltext·2026-01-23
ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMs
Date of publication 2 December 2025,
date of current version 22 December 2025.
10.1109/ACCESS.2025.3638251
ProveRAG: Provenance-Driven Vulnerability Analysis with Automated Retrieval-Augmented LLMs
Reza Fayyazi1 0009-0001-5323-9504 Graduate Student Member, IEEE,
Stella Hoyos Trueba2, Michael Zuzak1 Member, IEEE, Shanchieh Jay Yang3 Senior Member, IEEE
[1]Department of Computer Engineering, Rochester Institute of Technology, Rochester, NY 14623, USA
[2]Department of Computer Science, Karlsruhe Institute of Technology, Karlsruhe 76131, Germany
[3]Informatics and Applied Technology Institute, Gonzaga University, Spokane, WA 99258, USA
This material is based upon work supported by the National Science Foundation under Grant Nos. 2344237, 2228001, and DGE-2125362.
R. Fayyazi et al. : ProveR
Hackernews
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
blogs_hackernews·2026-09-28·CVSS 9.8
CVE-2026-88771 [CRITICAL] ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of week this was: forgotten assumptions turning into live attack surface.
Elsewhere, weak service accounts, old bugs, exposed systems, phishing kits, and strangely easy exploit paths kept doing useful work for attackers. Nothing exotic. Mostly things nobody expected to matter anymore.
Here’s the full recap of what mattered this week.
## ⚡ Threat of the Week
Citrix
https://canon.jp/support/support-info/240205vulnerability-responsehttps://psirt.canon/advisory-information/cp2024-001/https://www.canon-europe.com/support/product-security-latest-news/https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printershttps://canon.jp/support/support-info/240205vulnerability-responsehttps://psirt.canon/advisory-information/cp2024-001/https://www.canon-europe.com/support/product-security-latest-news/https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers
2024-02-06
Published