CVE Feed

    Dashboard / CVE / CVE-2021-20877

    CVE-2021-20877

    Cross-site scripting vulnerability in Canon laser printers and small office multifunctional printers (LBP162L/LBP162, MF4890dw, MF269dw/MF265dw/MF264dw/MF262dw, MF249dw/MF245dw/MF244dw/MF242dw/MF232w, and MF229dw/MF224dw/MF222dw sold in Japan, imageCLASS MF Series (MF113W/MF212W/MF217W/MF227DW/MF229DW, MF232W/MF244DW/MF247DW/MF249DW, MF264DW/MF267DW/MF269DW/MF269DW VP, and MF4570DN/MF4570DW/MF4770N/MF4880DW/MF4890DW) and imageCLASS LBP Series (LBP113W/LBP151DW/LBP162DW ) sold in the US, and iSENSYS (LBP162DW, LBP113W, LBP151DW, MF269dw, MF267dw, MF264dw, MF113w, MF249dw, MF247dw, MF244dw, MF237w, MF232w, MF229dw, MF217w, MF212w, MF4780w, and MF4890dw) and imageRUNNER (2206IF, 2204N, and 2204F) sold in Europe) allows remote attackers to inject an arbitrary script via unspecified vectors.

    Published:Feb 8, 2022
    Last Modified:Nov 21, 2024
    EPS:Feb 8, 2022
    EPSS Score:0.00285
    CVSS Score:4.8

    Affected Products

    Vendor
    Canon
    Product
    2204f
    Vendor
    Canon
    Product
    2204n
    Vendor
    Canon
    Product
    2206if
    Vendor
    Canon
    Product
    Lbp113w
    Vendor
    Canon
    Product
    Lbp151dw
    Vendor
    Canon
    Product
    Lbp162
    Vendor
    Canon
    Product
    Lbp162dw
    Vendor
    Canon
    Product
    Lbp162l
    Vendor
    Canon
    Product
    Mf113w
    Vendor
    Canon
    Product
    Mf212w
    Vendor
    Canon
    Product
    Mf217w
    Vendor
    Canon
    Product
    Mf222dw
    Vendor
    Canon
    Product
    Mf224dw
    Vendor
    Canon
    Product
    Mf227dw
    Vendor
    Canon
    Product
    Mf229dw
    Vendor
    Canon
    Product
    Mf232w
    Vendor
    Canon
    Product
    Mf237w
    Vendor
    Canon
    Product
    Mf242dw
    Vendor
    Canon
    Product
    Mf244dw
    Vendor
    Canon
    Product
    Mf245dw
    Vendor
    Canon
    Product
    Mf247dw
    Vendor
    Canon
    Product
    Mf249dw
    Vendor
    Canon
    Product
    Mf262dw
    Vendor
    Canon
    Product
    Mf264dw
    Vendor
    Canon
    Product
    Mf265dw
    Vendor
    Canon
    Product
    Mf267dw
    Vendor
    Canon
    Product
    Mf269dw
    Vendor
    Canon
    Product
    Mf269dw Vp
    Vendor
    Canon
    Product
    Mf4570dn
    Vendor
    Canon
    Product
    Mf4570dw
    Vendor
    Canon
    Product
    Mf4770n
    Vendor
    Canon
    Product
    Mf4780w
    Vendor
    Canon
    Product
    Mf4880dw
    Vendor
    Canon
    Product
    Mf4890dw

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High