CVE-2013-4614

Severity CVSS v4.0:

Pending analysis

Type:

CWE-255 Credentials Management

Publication date:

21/06/2013

Last modified:

11/04/2025

Description

English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended workstation.

Impact

Vector 2.0

AV:L/AC:L/Au:N/C:P/I:N/A:N CVSS v2.0 Severity and Metrics:

Base Score: 2.10 LOW
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Attack Vector (AV): Local
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): None
Availability (A): None

Base Score 2.0

2.10

Severity 2.0

LOW

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:h:canon:mg3100_printer:-:::::::*
cpe:2.3:h:canon:mg5300_printer:-:::::::*
cpe:2.3:h:canon:mg6100_printer:-:::::::*
cpe:2.3:h:canon:mp340_printer:-:::::::*
cpe:2.3:h:canon:mp495_printer:-:::::::*
cpe:2.3:h:canon:mx870_printer:-:::::::*
cpe:2.3:h:canon:mx890_printer:-:::::::*
cpe:2.3:h:canon:mx920_printer:-:::::::*
cpe:2.3:h:canon:mx922_printer:-:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:h:canon:mg3100_printer:-:::::::*
cpe:2.3:h:canon:mg5300_printer:-:::::::*
cpe:2.3:h:canon:mg6100_printer:-:::::::*
cpe:2.3:h:canon:mp340_printer:-:::::::*
cpe:2.3:h:canon:mp495_printer:-:::::::*
cpe:2.3:h:canon:mx870_printer:-:::::::*
cpe:2.3:h:canon:mx890_printer:-:::::::*
cpe:2.3:h:canon:mx920_printer:-:::::::*
cpe:2.3:h:canon:mx922_printer:-:::::::*

CVE-2013-4614

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools