ZDI-26-207
HIGH 8.8
Published
Mar 16, 2026
Canon imageCLASS MF654Cdw dtdc_addr_importSub Stack-based Buffer Overflow Remote Code Execution Vulnerability
Canon
Canon imageCLASS MF654Cdw printers contain a network-based vulnerability (CVE-2025-14236) that allows unauthenticated attackers to execute arbitrary code remotely, earning a critical CVSS score of 8.8. This means an attacker on the same network could gain complete control of the printer without needing credentials. Security teams should immediately identify these printers on their networks, apply any available patches from Canon, and consider isolating them on segmented networks until fixes are deployed.