CVE-2025-14236 | Canon - Address Book attribute tag processing Operational Intel

Executive Risk Summary

"A buffer overflow vulnerability in the Address Book attribute tag processing of Canon Small Office Multifunction Printers may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. This vulnerability affects various Canon printer models, including Satera, imageCLASS, and i-SENSYS series, with firmware version v06.02 and earlier."

Anticipated Attack Path

1. Attacker sends malicious input to the Address Book attribute tag processing
2. Buffer overflow occurs, potentially allowing arbitrary code execution
3. Attacker gains control of the affected printer, potentially leading to further exploitation

Am I Vulnerable?

Verify firmware version of affected Canon printer models
Check for signs of unauthorized access or suspicious activity
Apply firmware updates or patches as recommended by Canon

Operational Audit Arsenal

Target Type firmware

Target Asset Address Book attribute tag processing

Standard Path Canon Small Office Multifunction Printers

Manual Verification Required

This is a non-Windows asset (Canon). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.