First published: Mon Nov 30 2020(Updated: )
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Canon Mf237w Firmware | =06.07 | |
Canon MF237w | ||
Canon Mf113w Firmware | ||
Canon Mf113w | ||
Canon Mf212w Firmware | ||
Canon Mf212w | ||
Canon Mf216n Firmware | ||
Canon Mf216n | ||
Canon Mf217w Firmware | ||
Canon Mf217w | ||
Canon Mf226dn Firmware | ||
Canon Mf226dn | ||
Canon Mf229dw Firmware | ||
Canon Mf229dw | ||
Canon Mf231 Firmware | ||
Canon Mf231 | ||
Canon Mf232w Firmware | ||
Canon Mf232w | ||
Canon Mf244dw Firmware | ||
Canon Mf244dw | ||
Canon Mf247dw Firmware | ||
Canon Mf247dw | ||
Canon Mf249dw Firmware | ||
Canon Mf249dw | ||
Canon Mf264dw Firmware | ||
Canon Mf264dw | ||
Canon Mf267dw Firmware | ||
Canon Mf267dw | ||
Canon Mf269dw Firmware | ||
Canon Mf269dw | ||
Canon Mf4570dn Firmware | ||
Canon Mf4570dn | ||
Canon Mf4580dn Firmware | ||
Canon Mf4580dn | ||
Canon Mf4780w Firmware | ||
Canon Mf4780w | ||
Canon Mf4870dn Firmware | ||
Canon Mf4870dn | ||
Canon Mf4890dw Firmware | ||
Canon Mf4890dw | ||
Canon Lbp113w Firmware | ||
Canon Lbp113w | ||
Canon Lbp151dw Firmware | ||
Canon Lbp151dw | ||
Canon Lbp162dw Firmware | ||
Canon Lbp162dw | ||
Canon Ir2202n Firmware | ||
Canon Ir2202n | ||
Canon Ir2204n Firmware | ||
Canon Ir2204n | ||
Canon Ir2204f Firmware | ||
Canon Ir2204f | ||
Canon Ir2206n Firmware | ||
Canon Ir2206n | ||
Canon Ir2206if Firmware | ||
Canon Ir2206if |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-16849 is an "Improper Handling of Length Parameter Inconsistency" vulnerability discovered on Canon MF237w 06.07 devices.
The severity of CVE-2020-16849 is high with a CVSS score of 7.5.
Canon MF237w devices with firmware version 06.07 are affected by CVE-2020-16849.
An unauthenticated network attacker can exploit CVE-2020-16849 by sending a malicious packet to the IPv4/ICMPv4 component of the affected device.
It is recommended to update the firmware of the Canon MF237w devices to a version that includes a fix for CVE-2020-16849.