Critical Bugs in Canon Small Office Printers Allow Code Execution, DDoS

Canon patched seven critical buffer-overflow vulnerabilities (CVE-2023-6229–CVE-2023-6234 and CVE-2024-0244) in SOHO and laser printers that carry 9.8 CVSS ratings and could allow unauthenticated remote denial-of-service or arbitrary code execution; although no active exploitation has been observed, organizations are advised to apply firmware updates, restrict printer network exposure, and segment networks to limit attacker pivoting.