CVE-2021-20877: Canon 2204f

Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Canon laser printers and small office multifunctional printers (LBP162L/LBP162, MF4890dw, MF269dw/MF265dw/MF264dw/MF262dw, MF249dw/MF245dw/MF244dw/MF242dw/MF232w, and MF229dw/MF224dw/MF222dw sold in Japan, imageCLASS MF Series (MF113W/MF212W/MF217W/MF227DW/MF229DW, MF232W/MF244DW/MF247DW/MF249DW, MF264DW/MF267DW/MF269DW/MF269DW VP, and MF4570DN/MF4570DW/MF4770N/MF4880DW/MF4890DW) and imageCLASS LBP Series (LBP113W/LBP151DW/LBP162DW ) sold in the US, and iSENSYS (LBP162DW, LBP113W, LBP151DW, MF269dw, MF267dw, MF264dw, MF113w, MF249dw, MF247dw, MF244dw, MF237w, MF232w, MF229dw, MF217w, MF212w, MF4780w, and MF4890dw) and imageRUNNER (2206IF, 2204N, and 2204F) sold in Europe) allows remote attackers to inject an arbitrary script via unspecified vectors.

Affected products

  • Canon 2204f: affected versions not specified
  • Canon 2204n: affected versions not specified
  • Canon 2206if: affected versions not specified
  • Canon LBP113W: affected versions not specified
  • Canon LBP151DW: affected versions not specified
  • Canon LBP162: affected versions not specified
  • Canon LBP162DW: affected versions not specified
  • Canon LBP162L: affected versions not specified
  • Canon MF113W: affected versions not specified
  • Canon MF212W: affected versions not specified
  • Canon MF217W: affected versions not specified
  • Canon MF222DW: affected versions not specified
  • Canon MF224DW: affected versions not specified
  • Canon MF227DW: affected versions not specified
  • Canon MF229DW: affected versions not specified
  • Canon MF232W: affected versions not specified
  • Canon MF237W: affected versions not specified
  • Canon MF242DW: affected versions not specified
  • Canon MF244DW: affected versions not specified
  • Canon MF245DW: affected versions not specified
  • Canon MF247DW: affected versions not specified
  • Canon MF249DW: affected versions not specified
  • Canon MF262DW: affected versions not specified
  • Canon MF264DW: affected versions not specified
  • Canon MF265DW: affected versions not specified
  • and 9 more

Published 2022-02-08. Last modified 2026-06-17.