CVE-2013-4614: canon mg3100_printer Credentials Management Errors
Vulnerability summary
CVE-2013-4614 is a low (CVSS 2.1) Credentials Management Errors vulnerability in canon mg3100_printer. EPSS estimates a 2.85% chance of exploitation in the next 30 days, higher than 86.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 21-06-2013PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended workstation.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.85%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.85% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCanon Printer Wireless Configuration Disclosure
auxiliary/scanner/http/canon_wireless
Maturity: poc
Weaknesses
CWE · root causeAffected systems
1 vendor · 9 products
References
3 links- www.mattandreko.com/2013/06/canon-y-u-no-security.htmlX Refsource MISC