7.5

CVE-2020-16849

An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.

Data is provided by the National Vulnerability Database (NVD)
Canon ≫ Mf237w Firmware Version06.07
   Canon ≫ Mf237w Version-
Canon ≫ Mf113w Firmware Version-
   Canon ≫ Mf113w Version-
Canon ≫ Mf212w Firmware Version-
   Canon ≫ Mf212w Version-
Canon ≫ Mf216n Firmware Version-
   Canon ≫ Mf216n Version-
Canon ≫ Mf217w Firmware Version-
   Canon ≫ Mf217w Version-
Canon ≫ Mf226dn Firmware Version-
   Canon ≫ Mf226dn Version-
Canon ≫ Mf229dw Firmware Version-
   Canon ≫ Mf229dw Version-
Canon ≫ Mf231 Firmware Version-
   Canon ≫ Mf231 Version-
Canon ≫ Mf232w Firmware Version-
   Canon ≫ Mf232w Version-
Canon ≫ Mf244dw Firmware Version-
   Canon ≫ Mf244dw Version-
Canon ≫ Mf247dw Firmware Version-
   Canon ≫ Mf247dw Version-
Canon ≫ Mf249dw Firmware Version-
   Canon ≫ Mf249dw Version-
Canon ≫ Mf264dw Firmware Version-
   Canon ≫ Mf264dw Version-
Canon ≫ Mf267dw Firmware Version-
   Canon ≫ Mf267dw Version-
Canon ≫ Mf269dw Firmware Version-
   Canon ≫ Mf269dw Version-
Canon ≫ Mf4570dn Firmware Version-
   Canon ≫ Mf4570dn Version-
Canon ≫ Mf4580dn Firmware Version-
   Canon ≫ Mf4580dn Version-
Canon ≫ Mf4780w Firmware Version-
   Canon ≫ Mf4780w Version-
Canon ≫ Mf4870dn Firmware Version-
   Canon ≫ Mf4870dn Version-
Canon ≫ Mf4890dw Firmware Version-
   Canon ≫ Mf4890dw Version-
Canon ≫ Lbp113w Firmware Version-
   Canon ≫ Lbp113w Version-
Canon ≫ Lbp151dw Firmware Version-
   Canon ≫ Lbp151dw Version-
Canon ≫ Lbp162dw Firmware Version-
   Canon ≫ Lbp162dw Version-
Canon ≫ Ir2202n Firmware Version-
   Canon ≫ Ir2202n Version-
Canon ≫ Ir2204n Firmware Version-
   Canon ≫ Ir2204n Version-
Canon ≫ Ir2204f Firmware Version-
   Canon ≫ Ir2204f Version-
Canon ≫ Ir2206n Firmware Version-
   Canon ≫ Ir2206n Version-
Canon ≫ Ir2206if Firmware Version-
   Canon ≫ Ir2206if Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.37% 0.558
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N