ZDI-26-222 HIGH 8.8 Published Mar 23, 2026

Canon imageCLASS MF654Cdw BJNP Memory Corruption Remote Code Execution Vulnerability

Canon

CVE-2025-14233 is a critical unauthenticated remote code execution vulnerability affecting Canon imageCLASS MF654Cdw printers that allows network-adjacent attackers to execute arbitrary code without needing credentials. An attacker can gain complete control over the affected printer to potentially access sensitive documents, disrupt operations, or use the device as a pivot point into the network. Security teams should immediately identify and isolate affected Canon printers, check for available firmware patches, implement network segmentation to restrict printer access, and monitor for any suspicious activity targeting these devices.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy