This vulnerability (CVE-2025-14231) is an out-of-bounds write (CWE-787) in the WSD print job processing functionality of Canon's Small Office Multifunction Printers and Laser Printers, including the Satera LBP670C Series and other related models. It affects firmware version 06.02 and earlier. An attacker on the same network segment can exploit this buffer overflow to cause denial of service or execute arbitrary code on the device. The vulnerability has a CVSS 4.0 score of 9.3, reflecting network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability is published and assigned by Canon but no patch or remediation details are currently available.

Successful exploitation can lead to the printer becoming unresponsive (denial of service) or allow remote code execution by an attacker on the same network segment. This could compromise the device's confidentiality, integrity, and availability. Given the critical CVSS score of 9.3, the impact is severe, potentially allowing full control over the affected printer.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, network segmentation to restrict access to the printer's management and print services from untrusted network segments may reduce exposure. Monitor Canon's official channels for firmware updates addressing this vulnerability.