CVE-2020-16849

Published: Nov 30, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.

Affected (28)

Products: Canon: Mf237w Firmware, Mf113w Firmware, Mf212w Firmware, Mf216n Firmware, Mf217w Firmware, Mf226dn Firmware, Mf229dw Firmware, Mf231 Firmware, Mf232w Firmware, Mf244dw Firmware, Mf247dw Firmware, Mf249dw Firmware, Mf264dw Firmware, Mf267dw Firmware, Mf269dw Firmware, Mf4570dn Firmware, Mf4580dn Firmware, Mf4780w Firmware, Mf4870dn Firmware, Mf4890dw Firmware, Lbp113w Firmware, Lbp151dw Firmware, Lbp162dw Firmware, Ir2202n Firmware, Ir2204n Firmware, Ir2204f Firmware, Ir2206n Firmware, Ir2206if Firmware

28 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf237w Firmware	Version 06.07

Running on/with	Platform Versions
Canon Mf237w	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf113w Firmware	All versions

Running on/with	Platform Versions
Canon Mf113w	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf212w Firmware	All versions

Running on/with	Platform Versions
Canon Mf212w	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf216n Firmware	All versions

Running on/with	Platform Versions
Canon Mf216n	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf217w Firmware	All versions

Running on/with	Platform Versions
Canon Mf217w	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf226dn Firmware	All versions

Running on/with	Platform Versions
Canon Mf226dn	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf229dw Firmware	All versions

Running on/with	Platform Versions
Canon Mf229dw	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf231 Firmware	All versions

Running on/with	Platform Versions
Canon Mf231	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf232w Firmware	All versions

Running on/with	Platform Versions
Canon Mf232w	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf244dw Firmware	All versions

Running on/with	Platform Versions
Canon Mf244dw	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf247dw Firmware	All versions

Running on/with	Platform Versions
Canon Mf247dw	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf249dw Firmware	All versions

Running on/with	Platform Versions
Canon Mf249dw	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf264dw Firmware	All versions

Running on/with	Platform Versions
Canon Mf264dw	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf267dw Firmware	All versions

Running on/with	Platform Versions
Canon Mf267dw	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf269dw Firmware	All versions

Running on/with	Platform Versions
Canon Mf269dw	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf4570dn Firmware	All versions

Running on/with	Platform Versions
Canon Mf4570dn	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf4580dn Firmware	All versions

Running on/with	Platform Versions
Canon Mf4580dn	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf4780w Firmware	All versions

Running on/with	Platform Versions
Canon Mf4780w	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf4870dn Firmware	All versions

Running on/with	Platform Versions
Canon Mf4870dn	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf4890dw Firmware	All versions

Running on/with	Platform Versions
Canon Mf4890dw	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp113w Firmware	All versions

Running on/with	Platform Versions
Canon Lbp113w	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp151dw Firmware	All versions

Running on/with	Platform Versions
Canon Lbp151dw	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp162dw Firmware	All versions

Running on/with	Platform Versions
Canon Lbp162dw	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Ir2202n Firmware	All versions

Running on/with	Platform Versions
Canon Ir2202n	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Ir2204n Firmware	All versions

Running on/with	Platform Versions
Canon Ir2204n	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Ir2204f Firmware	All versions

Running on/with	Platform Versions
Canon Ir2204f	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Ir2206n Firmware	All versions

Running on/with	Platform Versions
Canon Ir2206n	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Ir2206if Firmware	All versions

Running on/with	Platform Versions
Canon Ir2206if	All versions

References (4)

https://blog.scadafence.com/vulnerability-report-cve-2020-16849

Source: cve@mitre.org

Third Party Advisory

https://www.canon-europe.com/support/product-security/

Source: cve@mitre.org

Vendor Advisory

https://blog.scadafence.com/vulnerability-report-cve-2020-16849

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.canon-europe.com/support/product-security/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.