CVE-2020-16849

Published: Nov 30, 2020 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2020-8807 Aliases: GSD-2020-16849
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
MEDIUM 5,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: partial
Integrity: none
Availability: none

Description

AI Translation Available

An issue was discovered on Canon MF237w 06.07 devices. An 'Improper Handling of Length Parameter Inconsistency' issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0037
Percentile
0,6th
Updated

EPSS Score Trend (Last 91 Days)

Operating System

Mf226Dn Firmware by Canon

Product Information
Vendor Canon
Product Mf226Dn Firmware
Version -
cpe:2.3:o:canon:mf226dn_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf264Dw Firmware by Canon

Product Information
Vendor Canon
Product Mf264Dw Firmware
Version -
cpe:2.3:o:canon:mf264dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf269Dw Firmware by Canon

Product Information
Vendor Canon
Product Mf269Dw Firmware
Version -
cpe:2.3:o:canon:mf269dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf244Dw Firmware by Canon

Product Information
Vendor Canon
Product Mf244Dw Firmware
Version -
cpe:2.3:o:canon:mf244dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf4780W Firmware by Canon

Product Information
Vendor Canon
Product Mf4780W Firmware
Version -
cpe:2.3:o:canon:mf4780w_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf4870Dn Firmware by Canon

Product Information
Vendor Canon
Product Mf4870Dn Firmware
Version -
cpe:2.3:o:canon:mf4870dn_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf237W Firmware by Canon

Product Information
Vendor Canon
Product Mf237W Firmware
Version 06.07
cpe:2.3:o:canon:mf237w_firmware:06.07:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ir2204N Firmware by Canon

Product Information
Vendor Canon
Product Ir2204N Firmware
Version -
cpe:2.3:o:canon:ir2204n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf4890Dw Firmware by Canon

Product Information
Vendor Canon
Product Mf4890Dw Firmware
Version -
cpe:2.3:o:canon:mf4890dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ir2202N Firmware by Canon

Product Information
Vendor Canon
Product Ir2202N Firmware
Version -
cpe:2.3:o:canon:ir2202n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf216N Firmware by Canon

Product Information
Vendor Canon
Product Mf216N Firmware
Version -
cpe:2.3:o:canon:mf216n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf229Dw Firmware by Canon

Product Information
Vendor Canon
Product Mf229Dw Firmware
Version -
cpe:2.3:o:canon:mf229dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf4570Dn Firmware by Canon

Product Information
Vendor Canon
Product Mf4570Dn Firmware
Version -
cpe:2.3:o:canon:mf4570dn_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf4580Dn Firmware by Canon

Product Information
Vendor Canon
Product Mf4580Dn Firmware
Version -
cpe:2.3:o:canon:mf4580dn_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Lbp113W Firmware by Canon

Product Information
Vendor Canon
Product Lbp113W Firmware
Version -
cpe:2.3:o:canon:lbp113w_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf217W Firmware by Canon

Product Information
Vendor Canon
Product Mf217W Firmware
Version -
cpe:2.3:o:canon:mf217w_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf249Dw Firmware by Canon

Product Information
Vendor Canon
Product Mf249Dw Firmware
Version -
cpe:2.3:o:canon:mf249dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf212W Firmware by Canon

Product Information
Vendor Canon
Product Mf212W Firmware
Version -
cpe:2.3:o:canon:mf212w_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf113W Firmware by Canon

Product Information
Vendor Canon
Product Mf113W Firmware
Version -
cpe:2.3:o:canon:mf113w_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ir2206If Firmware by Canon

Product Information
Vendor Canon
Product Ir2206If Firmware
Version -
cpe:2.3:o:canon:ir2206if_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Lbp151Dw Firmware by Canon

Product Information
Vendor Canon
Product Lbp151Dw Firmware
Version -
cpe:2.3:o:canon:lbp151dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ir2204F Firmware by Canon

Product Information
Vendor Canon
Product Ir2204F Firmware
Version -
cpe:2.3:o:canon:ir2204f_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Lbp162Dw Firmware by Canon

Product Information
Vendor Canon
Product Lbp162Dw Firmware
Version -
cpe:2.3:o:canon:lbp162dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf231 Firmware by Canon

Product Information
Vendor Canon
Product Mf231 Firmware
Version -
cpe:2.3:o:canon:mf231_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ir2206N Firmware by Canon

Product Information
Vendor Canon
Product Ir2206N Firmware
Version -
cpe:2.3:o:canon:ir2206n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf247Dw Firmware by Canon

Product Information
Vendor Canon
Product Mf247Dw Firmware
Version -
cpe:2.3:o:canon:mf247dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf267Dw Firmware by Canon

Product Information
Vendor Canon
Product Mf267Dw Firmware
Version -
cpe:2.3:o:canon:mf267dw_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mf232W Firmware by Canon

Product Information
Vendor Canon
Product Mf232W Firmware
Version -
cpe:2.3:o:canon:mf232w_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://blog.scadafence.com/vulnerability-report-cve-2020-1…
Third Party Advisory
https://blog.scadafence.com/vulnerability-report-cve-2020-16849
https://www.canon-europe.com/support/product-security/
Vendor Advisory
https://www.canon-europe.com/support/product-security/
https://blog.scadafence.com/vulnerability-report-cve-2020-1…
Third Party Advisory
https://blog.scadafence.com/vulnerability-report-cve-2020-16849
https://www.canon-europe.com/support/product-security/
Vendor Advisory
https://www.canon-europe.com/support/product-security/