CVE-2013-4613: canon mg3100_printer
Vulnerability summary
CVE-2013-4613 is a high (CVSS 7.5) vulnerability in canon mg3100_printer. EPSS estimates a 2.01% chance of exploitation in the next 30 days, higher than 80.5% of scored vulnerabilities.
Timeline
- 21-06-2013PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has apparently responded by stating "for user convenience, the default setting does not require a password. However, if a user has a particular concern about third parties accessing the user's home printer, the default setting can be changed to add a password."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.01%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.01% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
1 vendor · 9 products
References
2 links- www.mattandreko.com/2013/06/canon-y-u-no-security.htmlX Refsource MISC