What’s Vulnerable › Vulnerabilities
CVE-2013-4614
- Severity: low (CVSS 2.1 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2013-06-21 · updated 2026-06-16
- Weakness: CWE-255
Description
English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended workstation.
Affected products
- Canon Mg3100 Printer: all versions
- Canon Mg5300 Printer: all versions
- Canon Mg6100 Printer: all versions
- Canon Mp340 Printer: all versions
- Canon Mp495 Printer: all versions
- Canon Mx870 Printer: all versions
- Canon Mx890 Printer: all versions
- Canon Mx920 Printer: all versions
- Canon Mx922 Printer: all versions
References
- http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html
- http://www.mattandreko.com/2013/06/canon-y-u-no-security.html
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/canon_wireless.rb
- http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html
- http://www.mattandreko.com/2013/06/canon-y-u-no-security.html
- https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/canon_wireless.rb
Get alerted when CVE-2013-4614 or the next vulnerability affects your stack