An issue was discovered on Canon MF237w 06.07 devices. An “Improper Handling of Length Parameter Inconsistency” issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16849
Reference (s):
- https://www.canon-europe.com/support/product-security/
- https://blog.scadafence.com/vulnerability-report-cve-2020-16849