ZDI-26-205 HIGH 8.8 Published Mar 16, 2026

Canon imageCLASS MF654Cdw PJCC Request Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Canon

Canon imageCLASS MF654Cdw printers contain a critical remote code execution vulnerability (CVE-2025-14234) that allows network-adjacent attackers to execute arbitrary code without authentication. An attacker can exploit this flaw to gain complete control over affected printers, potentially compromising sensitive documents, disrupting operations, or using the device as a network pivot point. Security teams should immediately prioritize patching these devices, segment printer networks from sensitive systems, and monitor for suspicious printer activity or unauthorized access attempts.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy