Thank you for using Canon products. Canon U.S.A., Inc. has recently become aware of potential multiple buffer overflow vulnerabilities in the Canon Laser Printers and Small Office Multifunctional Printers listed below. If the product is connected directly to the internet without using a wired or Wi-Fi router, a third party could potentially execute arbitrary code or the product could be subjected to a Denial-of-Service (DoS) attack. (CVE-2022-24672, CVE-2022-24673, CVE-2022-24674) Affected Products imageCLASS MF Series • Color imageCLASS X MF1127C • Color imageCLASS X C1127i • imageCLASS X MF1238 • imageCLASS X 1238i • imageCLASS MF445dw • imageCLASS MF449dw • imageCLASS MF449x • Color imageCLASS MF634Cdw • Color imageCLASS MF635Cx • Color imageCLASS MF644Cdw • Color imageCLASS MF645Cx • Color imageCLASS MF735Cdw • Color imageCLASS MF735Cx • Color imageCLASS MF746Cdw • Color imageCLASS MF746Cx imageCLASS LBP Series • Color imageCLASS X LBP1127C • Color imageCLASS X C1127P • imageCLASS X LBP1238 • imageCLASS X 1238P • imageCLASS LBP226dw • imageCLASS LBP228dw • imageCLASS LBP228x • Color imageCLASS LBP612Cdw • Color imageCLASS LBP613Cdw • Color imageCLASS LBP622Cdw • Color imageCLASS LBP623Cdw • Color imageCLASS LBP654Cdw • Color imageCLASS LBP654Cx • Color imageCLASS LBP664Cdw • Color imageCLASS LBP664Cx Note: If we determine that additional products could potentially be impacted by this matter, we will issue an updated Service Notice. Support Please click your product from the list above or proceed to https://www.cla.canon.com/cla/en/support to download the latest firmware. Furthermore, if you have not done so already, we recommend that you set up a private IP address for products and create a network environment with a firewall or Wi-Fi router that can restrict network access. In addition, please check “Securing products when connecting to a network” in the URL below for other security measures that can be used with your Canon products. https://www.cla.canon.com/en_US/app/pdf/message-to-our-customers/Connecting-To-Network-Securely.pdf Contact Information Should you have any questions about the announcement, please contact the Authorized Service Facility in your area or you may contact the Call Center within your region. |