# Pwn2Own 2021 Canon ImageCLASS MF644Cdw writeup

DevFeed: [Pwn2Own 2021 Canon ImageCLASS MF644Cdw writeup](<https://devfeed.tech/articles/pwn2own-2021-canon-imageclass-mf644cdw-writeup-39715.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2022/06/11/pwn2own-2021-canon-imageclass-mf644cdw-writeup/>)

Author: Nicolas "NK" Devillers & Jean-Romain "JRomainG" Garnier & Raphaël "\_trou\_" Rigo

Published: 2022-06-11T15:00:00Z

Content type: article

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Printer](<https://devfeed.tech/topics/printer.md>), [Embedded Software Dev](<https://devfeed.tech/topics/embedded-software-dev.md>), [Load Balancing](<https://devfeed.tech/topics/load-balancing.md>), [macOS](<https://devfeed.tech/topics/macos.md>)

Tags: [canon](<https://devfeed.tech/tags/canon.md>), [cve-2022-24674](<https://devfeed.tech/tags/cve-2022-24674.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [imageclass](<https://devfeed.tech/tags/imageclass.md>), [macos](<https://devfeed.tech/tags/macos.md>), [memory-corruption](<https://devfeed.tech/tags/memory-corruption.md>), [mf644cdw](<https://devfeed.tech/tags/mf644cdw.md>), [printers](<https://devfeed.tech/tags/printers.md>), [pwn2own](<https://devfeed.tech/tags/pwn2own.md>), [pwn2own-austin](<https://devfeed.tech/tags/pwn2own-austin.md>), [research](<https://devfeed.tech/tags/research.md>), [writeup](<https://devfeed.tech/tags/writeup.md>), [zdi-22-516](<https://devfeed.tech/tags/zdi-22-516.md>)

## AI overview

A technical writeup of research targeting the Canon ImageCLASS MF644Cdw printer for Pwn2Own Austin 2021. It describes analyzing the printer's firmware, obtaining firmware downloads, and investigating Canon's firmware URL structure and version availability.

## Source excerpt

Introduction Pwn2Own Austin 2021 was announced in August 2021 and introduced new categories, including printers. Based on our previous experience with printers, we decided to go after one of the three models. Among those, the Canon ImageCLASS MF644Cdw seemed like the most interesting target: previous research was limited (mostly targeting ...