Lucene search

[email protected]NVD:CVE-2020-16849

HistoryNov 30, 2020 - 10:15 p.m.

CVE-2020-16849

2020-11-3022:15:10

[email protected]

web.nvd.nist.gov

canon

mf237w

ipv4/icmpv4

handling issue

sensitive information

network attacker

length parameter inconsistency

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

55.1%

JSON

An issue was discovered on Canon MF237w 06.07 devices. An “Improper Handling of Length Parameter Inconsistency” issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.

Affected configurations

Nvd

Node

canonmf237wMatch-

AND

canonmf237w_firmwareMatch06.07

Node

canonmf113wMatch-

AND

canonmf113w_firmwareMatch-

Node

canonmf212wMatch-

AND

canonmf212w_firmwareMatch-

Node

canonmf216nMatch-

AND

canonmf216n_firmwareMatch-

Node

canonmf217wMatch-

AND

canonmf217w_firmwareMatch-

Node

canonmf226dnMatch-

AND

canonmf226dn_firmwareMatch-

Node

canonmf229dwMatch-

AND

canonmf229dw_firmwareMatch-

Node

canonmf231Match-

AND

canonmf231_firmwareMatch-

Node

canonmf232w_firmwareMatch-

AND

canonmf232wMatch-

Node

canonmf244dw_firmwareMatch-

AND

canonmf244dwMatch-

Node

canonmf247dw_firmwareMatch-

AND

canonmf247dwMatch-

Node

canonmf249dw_firmwareMatch-

AND

canonmf249dwMatch-

Node

canonmf264dw_firmwareMatch-

AND

canonmf264dwMatch-

Node

canonmf267dw_firmwareMatch-

AND

canonmf267dwMatch-

Node

canonmf269dw_firmwareMatch-

AND

canonmf269dwMatch-

Node

canonmf4570dn_firmwareMatch-

AND

canonmf4570dnMatch-

Node

canonmf4580dn_firmwareMatch-

AND

canonmf4580dnMatch-

Node

canonmf4780w_firmwareMatch-

AND

canonmf4780wMatch-

Node

canonmf4870dn_firmwareMatch-

AND

canonmf4870dnMatch-

Node

canonmf4890dw_firmwareMatch-

AND

canonmf4890dwMatch-

Node

canonlbp113w_firmwareMatch-

AND

canonlbp113wMatch-

Node

canonlbp151dw_firmwareMatch-

AND

canonlbp151dwMatch-

Node

canonlbp162dw_firmwareMatch-

AND

canonlbp162dwMatch-

Node

canonir2202n_firmwareMatch-

AND

canonir2202nMatch-

Node

canonir2204n_firmwareMatch-

AND

canonir2204nMatch-

Node

canonir2204f_firmwareMatch-

AND

canonir2204fMatch-

Node

canonir2206n_firmwareMatch-

AND

canonir2206nMatch-

Node

canonir2206if_firmwareMatch-

AND

canonir2206ifMatch-

VendorProductVersionCPE
canonmf237w-cpe:2.3:h:canon:mf237w:-:*:*:*:*:*:*:*
canonmf237w_firmware06.07cpe:2.3:o:canon:mf237w_firmware:06.07:*:*:*:*:*:*:*
canonmf113w-cpe:2.3:h:canon:mf113w:-:*:*:*:*:*:*:*
canonmf113w_firmware-cpe:2.3:o:canon:mf113w_firmware:-:*:*:*:*:*:*:*
canonmf212w-cpe:2.3:h:canon:mf212w:-:*:*:*:*:*:*:*
canonmf212w_firmware-cpe:2.3:o:canon:mf212w_firmware:-:*:*:*:*:*:*:*
canonmf216n-cpe:2.3:h:canon:mf216n:-:*:*:*:*:*:*:*
canonmf216n_firmware-cpe:2.3:o:canon:mf216n_firmware:-:*:*:*:*:*:*:*
canonmf217w-cpe:2.3:h:canon:mf217w:-:*:*:*:*:*:*:*
canonmf217w_firmware-cpe:2.3:o:canon:mf217w_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
canon	mf237w	-	cpe:2.3:h:canon:mf237w:-:::::::*
canon	mf237w_firmware	06.07	cpe:2.3:o:canon:mf237w_firmware:06.07:::::::*
canon	mf113w	-	cpe:2.3:h:canon:mf113w:-:::::::*
canon	mf113w_firmware	-	cpe:2.3:o:canon:mf113w_firmware:-:::::::*
canon	mf212w	-	cpe:2.3:h:canon:mf212w:-:::::::*
canon	mf212w_firmware	-	cpe:2.3:o:canon:mf212w_firmware:-:::::::*
canon	mf216n	-	cpe:2.3:h:canon:mf216n:-:::::::*
canon	mf216n_firmware	-	cpe:2.3:o:canon:mf216n_firmware:-:::::::*
canon	mf217w	-	cpe:2.3:h:canon:mf217w:-:::::::*
canon	mf217w_firmware	-	cpe:2.3:o:canon:mf217w_firmware:-:::::::*

Rows per page:

1-10 of 561

References

blog.scadafence.com/vulnerability-report-cve-2020-16849

www.canon-europe.com/support/product-security/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

55.1%

JSON

Related for NVD:CVE-2020-16849

cvelist1 prion1 cve1 cnvd1