« Volver al listado

CVE-2013-4613

Estado: ModificadaAlta (7.5)—

The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has apparently responded by stating "for user convenience, the default setting does not require a password. However, if a user has a particular concern about third parties accessing the user's home printer, the default setting can be changed to add a password."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (9)

Canon — Mg3100 PrinterCanon — Mg5300 PrinterCanon — Mg6100 PrinterCanon — Mp340 PrinterCanon — Mp495 PrinterCanon — Mx870 PrinterCanon — Mx890 PrinterCanon — Mx920 PrinterCanon — Mx922 Printer

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4613",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-06-21T21:55:01.007",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mattandreko.com/2013/06/canon-y-u-no-security.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mattandreko.com/2013/06/canon-y-u-no-security.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has apparently responded by stating \"for user convenience, the default setting does not require a password. However, if a user has a particular concern about third parties accessing the user's home printer, the default setting can be changed to add a password.\""
    },
    {
      "lang": "es",
      "value": "La configuración por defecto de la interfaz de administración en las impresoras Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920 y MX922 no requiere autenticación, lo que permite a atacantes remotos modificar la configuración visitando la página de opciones avanzadas. NOTA: el vendedor al parecer ha respondido afirmando que \"para mayor comodidad del usuario, la configuración por defecto no requiere una contraseña. Sin embargo, un usuario puede cambiar la configuración por defecto y añadir una contraseña \"."
    }
  ],
  "lastModified": "2026-06-16T23:57:34.760",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mg3100_printer:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA808CB1-E232-45A7-8913-03DDD4D967AA"
            },
            {
              "criteria": "cpe:2.3:h:canon:mg5300_printer:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A7BF24E-0FE5-41E6-B4AF-5CEC5ED0AB3E"
            },
            {
              "criteria": "cpe:2.3:h:canon:mg6100_printer:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C007C65-9187-4593-B236-025831220B8C"
            },
            {
              "criteria": "cpe:2.3:h:canon:mp340_printer:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F038B929-787C-4350-B1A4-F2E0F12969FE"
            },
            {
              "criteria": "cpe:2.3:h:canon:mp495_printer:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A7687B9-537C-47CB-AA7B-DE57725B6E89"
            },
            {
              "criteria": "cpe:2.3:h:canon:mx870_printer:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "555BD45B-2B53-42BE-B76B-03205EADD821"
            },
            {
              "criteria": "cpe:2.3:h:canon:mx890_printer:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD762566-16C3-4391-B3C4-A0247AA082AF"
            },
            {
              "criteria": "cpe:2.3:h:canon:mx920_printer:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C74EB1F2-29DA-4835-B2D0-AB96CB1B4FB2"
            },
            {
              "criteria": "cpe:2.3:h:canon:mx922_printer:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08F6F82C-6EF6-40E6-A6C5-D2B4952B02FC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}