NVD

Id
40190  
Name
CVE-2013-4613  
Description
The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has apparently responded by stating "for user convenience, the default setting does not require a password. However, if a user has a particular concern about third parties accessing the user"s home printer, the default setting can be changed to add a password."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-06-21  
Modified Date
2013-06-24  
Seq
2013-4613  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204529 40190 CVE-2013-4613 20130618 Canon Wireless Printer Disclosure & DoS  View
204530 40190 CVE-2013-4613 http://www.mattandreko.com/2013/06/canon-y-u-no-security.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21536 JVNDB-2013-003111 複数の Canon プリンタの管理インターフェースにおける設定を変更される脆弱性 複数の Canon プリンタの管理インターフェースのデフォルト設定は、認証を必要としないため、設定を変更される脆弱性が存在します。 CVE-2013-4613 64555 CVE-2013-4613 40190 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003111.html 2013-06-18 2013-06-25 View