CVE-2020-16849
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter...
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.
- Record
CVE-2020-16849- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.
- Record
CVE-2020-16849- Updated
- 2026-11-02
EUVDEUVD-2020-8807 No score
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.
- Record
EUVD-2020-8807- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m3wc-g5cv-5v98 No score
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter...
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.
- Record
GHSA-m3wc-g5cv-5v98- Updated
- 2026-11-02
Affected products
- canon ir2202n firmware
- canon ir2204f firmware
- canon ir2204n firmware
- canon ir2206if firmware
- canon ir2206n firmware
- canon lbp113w firmware
- canon lbp151dw firmware
- canon lbp162dw firmware
- canon mf113w firmware
- canon mf212w firmware
- canon mf216n firmware
- canon mf217w firmware
Show 16 moreShow less
- canon mf226dn firmware
- canon mf229dw firmware
- canon mf231 firmware
- canon mf232w firmware
- canon mf237w firmware
- canon mf244dw firmware
- canon mf247dw firmware
- canon mf249dw firmware
- canon mf264dw firmware
- canon mf267dw firmware
- canon mf269dw firmware
- canon mf4570dn firmware
- canon mf4580dn firmware
- canon mf4780w firmware
- canon mf4870dn firmware
- canon mf4890dw firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-16849 is a high vulnerability (CVSS 7.5) in Canon Ir2202n Firmware, published November 30, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.14%, the 66th percentile. No source names a fixed version.