CVE-2020-16849 Information disclosure in n/a
An unauthenticated network attacker can exploit an improper length parameter handling flaw in the IPv4/ICMPv4 component to expose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-16849?
CVE-2020-16849 is a high-severity vulnerability in n/a, published on 30 Nov 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.
Which versions are affected by CVE-2020-16849?
It affects 28 products.
Products include Canon Ir2202n Firmware, Canon Ir2204f Firmware, Canon Ir2204n Firmware, Canon Ir2206if Firmware, Canon Ir2206n Firmware, Canon Lbp113w Firmware and 22 more.
How do I fix CVE-2020-16849?
No fix has been published for CVE-2020-16849 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-16849 being exploited?
There is no known exploitation of CVE-2020-16849 in the wild and no public exploit code.
Sources
Also known as GHSA-m3wc-g5cv-5v98.