CVE-2021-20877

🗓️ 08 Feb 2022 10:30:31Reported by jpcertType

CVE-2021-20877 Cross-site scripting vulnerability in Canon laser printers and small office multifunctional printers allows remote attackers to inject an arbitrary script

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-20877	8 Feb 202214:37	–	circl
CNNVD	Canon 多款产品跨站脚本漏洞	19 Jan 202200:00	–	cnnvd
Cvelist	CVE-2021-20877	8 Feb 202210:30	–	cvelist
EUVD	EUVD-2021-8286	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#64806328: Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting	19 Jan 202200:00	–	jvn
Japan Vulnerability Notes	Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting	19 Jan 202205:00	–	jvn
NVD	CVE-2021-20877	8 Feb 202211:15	–	nvd
Prion	Cross site scripting	8 Feb 202211:15	–	prion
RedhatCVE	CVE-2021-20877	22 May 202520:59	–	redhatcve

NVD

Node

canon 2204fMatch-

canon 2204nMatch-

canon 2206ifMatch-

canon lbp113wMatch-

canon lbp151dwMatch-

canon lbp162Match-

canon lbp162dwMatch-

canon lbp162lMatch-

canon mf113wMatch-

canon mf212wMatch-

canon mf217wMatch-

canon mf222dwMatch-

canon mf224dwMatch-

canon mf227dwMatch-

canon mf229dwMatch-

canon mf232wMatch-

canon mf237wMatch-

canon mf242dwMatch-

canon mf244dwMatch-

canon mf245dwMatch-

canon mf247dwMatch-

canon mf249dwMatch-

canon mf262dwMatch-

canon mf264dwMatch-

canon mf265dwMatch-

canon mf267dwMatch-

canon mf269dwMatch-

canon mf269dw_vpMatch-

canon mf4570dnMatch-

canon mf4570dwMatch-

canon mf4770nMatch-

canon mf4780wMatch-

canon mf4880dwMatch-

canon mf4890dwMatch-

[
  {
    "product": "Canon laser printers and small office multifunctional printers",
    "vendor": "Canon",
    "versions": [
      {
        "status": "affected",
        "version": "LBP162L/LBP162, MF4890dw, MF269dw/MF265dw/MF264dw/MF262dw, MF249dw/MF245dw/MF244dw/MF242dw/MF232w, and MF229dw/MF224dw/MF222dw sold in Japan, imageCLASS MF Series(MF113W/MF212W/MF217W/MF227DW/MF229DW, MF232W/MF244DW/MF247DW/MF249DW, MF264DW/MF267DW/MF269DW/MF269DW VP, and MF4570DN/MF4570DW/MF4770N/MF4880DW/MF4890DW) and imageCLASS LBP Series(LBP113W/LBP151DW/LBP162DW ) sold in the US, and iSENSYS(LBP162DW, LBP113W, LBP151DW, MF269dw, MF267dw, MF264dw, MF113w, MF249dw, MF247dw, MF244dw, MF237w, MF232w, MF229dw, MF217w, MF212w, MF4780w, and MF4890dw) and imageRUNNER(2206IF, 2204N, and 2204F) sold in Europe"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/jp/JVN64806328/index.html
cweb	www.cweb.canon.jp/e-support/info/211221xss.html
canon-europe	www.canon-europe.com/support/product-security-latest-news/
usa	www.usa.canon.com/internet/portal/us/home/support/product-advisories/detail/Service-Notice-Canon-Laser-Printer-and-Small-Office-Multifunctional-Printer-related-to-cross-site-scripting
jvn	www.jvn.jp/en/jp/JVN64806328/index.html

21 Nov 2024 05:47Current

5Medium risk

Vulners AI Score5

CVSS 23.5

CVSS 3.14.8

EPSS0.00285

CWE-79