CVE-2020-16849: Canon IR2202N Firmware

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered on Canon MF237w 06.07 devices. An "Improper Handling of Length Parameter Inconsistency" issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.

Affected products

• Canon IR2202N Firmware: affected versions not specified
• Canon IR2204F Firmware: affected versions not specified
• Canon IR2204N Firmware: affected versions not specified
• Canon IR2206IF Firmware: affected versions not specified
• Canon IR2206N Firmware: affected versions not specified
• Canon LBP113W Firmware: affected versions not specified
• Canon LBP151DW Firmware: affected versions not specified
• Canon LBP162DW Firmware: affected versions not specified
• Canon MF113W Firmware: affected versions not specified
• Canon MF212W Firmware: affected versions not specified
• Canon MF216N Firmware: affected versions not specified
• Canon MF217W Firmware: affected versions not specified
• Canon MF226DN Firmware: affected versions not specified
• Canon MF229DW Firmware: affected versions not specified
• Canon MF231 Firmware: affected versions not specified
• Canon MF232W Firmware: affected versions not specified
• Canon MF237W Firmware: version 06.07 only
• Canon MF244DW Firmware: affected versions not specified
• Canon MF247DW Firmware: affected versions not specified
• Canon MF249DW Firmware: affected versions not specified
• Canon MF264DW Firmware: affected versions not specified
• Canon MF267DW Firmware: affected versions not specified
• Canon MF269DW Firmware: affected versions not specified
• Canon MF4570DN Firmware: affected versions not specified
• Canon MF4580DN Firmware: affected versions not specified
• and 3 more

Published 2020-11-30. Last modified 2026-06-17.