CVE-2013-4614

Canon Printer Wireless Configuration Disclosure

Severity Score

4.6

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended workstation.

English/pages_MacUS/wls_set_content.html en impresoras Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, y MX922 muestra la contraseña de paso (passphrase) en texto plano, lo que permite a atacantes físicamente próximos obtener información sensible mediante la lectura de la pantalla de una estación de trabajo.

Various Canon printers suffer from a lack of password authentication, denial of service, and WEP/WPA/WPA2 secret disclosure vulnerabilities. Models affected include, but are not limited to, MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, and MX920.

*Credits: N/A

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-06-17 CVE Reserved
2013-06-18 CVE Published
2013-06-18 First Exploit
2024-09-17 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-255: Credentials Management Errors

CAPEC

References (5)

URL	Tag	Source
http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html	Mailing List
http://www.mattandreko.com/2013/06/canon-y-u-no-security.html	X_refsource_misc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/canon_wireless.rb	X_refsource_misc

URL	Date	SRC
https://packetstorm.news/files/id/181201	2024-09-01
https://packetstorm.news/files/id/122073	2013-06-18

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Canon Search vendor "Canon"		Mg3100 Printer Search vendor "Canon" for product "Mg3100 Printer"				-		-		Affected
Canon Search vendor "Canon"		Mg5300 Printer Search vendor "Canon" for product "Mg5300 Printer"				-		-		Affected
Canon Search vendor "Canon"		Mg6100 Printer Search vendor "Canon" for product "Mg6100 Printer"				-		-		Affected
Canon Search vendor "Canon"		Mp340 Printer Search vendor "Canon" for product "Mp340 Printer"				-		-		Affected
Canon Search vendor "Canon"		Mp495 Printer Search vendor "Canon" for product "Mp495 Printer"				-		-		Affected
Canon Search vendor "Canon"		Mx870 Printer Search vendor "Canon" for product "Mx870 Printer"				-		-		Affected
Canon Search vendor "Canon"		Mx890 Printer Search vendor "Canon" for product "Mx890 Printer"				-		-		Affected
Canon Search vendor "Canon"		Mx920 Printer Search vendor "Canon" for product "Mx920 Printer"				-		-		Affected
Canon Search vendor "Canon"		Mx922 Printer Search vendor "Canon" for product "Mx922 Printer"				-		-		Affected