What’s Vulnerable › Vulnerabilities

CVE-2020-16849

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-30 · updated 2026-06-17

Description

An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.

Affected products

• Canon Ir2202N Firmware: all versions
• Canon Ir2204F Firmware: all versions
• Canon Ir2204N Firmware: all versions
• Canon Ir2206If Firmware: all versions
• Canon Ir2206N Firmware: all versions
• Canon Lbp113W Firmware: all versions
• Canon Lbp151Dw Firmware: all versions
• Canon Lbp162Dw Firmware: all versions
• Canon Mf113W Firmware: all versions
• Canon Mf212W Firmware: all versions
• Canon Mf216N Firmware: all versions
• Canon Mf217W Firmware: all versions
• Canon Mf226Dn Firmware: all versions
• Canon Mf229Dw Firmware: all versions
• Canon Mf231 Firmware: all versions
• Canon Mf232W Firmware: all versions
• Canon Mf237W Firmware: 06.07
• Canon Mf244Dw Firmware: all versions
• Canon Mf247Dw Firmware: all versions
• Canon Mf249Dw Firmware: all versions
• Canon Mf264Dw Firmware: all versions
• Canon Mf267Dw Firmware: all versions
• Canon Mf269Dw Firmware: all versions
• Canon Mf4570Dn Firmware: all versions
• Canon Mf4580Dn Firmware: all versions
• Canon Mf4780W Firmware: all versions
• Canon Mf4870Dn Firmware: all versions
• Canon Mf4890Dw Firmware: all versions

References

• https://blog.scadafence.com/vulnerability-report-cve-2020-16849
• https://www.canon-europe.com/support/product-security/
• https://blog.scadafence.com/vulnerability-report-cve-2020-16849
• https://www.canon-europe.com/support/product-security/

Get alerted when CVE-2020-16849 or the next vulnerability affects your stack