GCVE - cpe:2.3:h:canon:mx870_printer:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:canon:mx870_printer:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Canon (`dd25f4b5-4370-558a-8300-9b7ca9a74e87`)
Product	Mx870 Printer (`2652e896-f9e3-572f-8f12-d7cda2afa262`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4615`	vulnerable	2026-06-08 05:04:48.740340	Details available The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service (device hang) via a crafted LAN_TXT24 parameter to English/pages_MacUS/cgi_lan.cgi followed by a direct request to English/pages_MacUS/lan_set_content.html. NOTE: the vendor has apparently responded by stating "Canon believes that its printers will not have to deal with unauthorized access to the network from an external location as long as the printers are used in a secured environment." Published: 2013-06-21T21:00:00.000Z Updated: 2024-09-17T03:32:37.944Z Open on db.gcve.eu Reference links http://www.mattandreko.com/2013/06/canon-y-u-no-security.html https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/canon_wireless_printer.rb http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4614`	vulnerable	2026-06-08 05:04:48.739855	Details available English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended workstation. Published: 2013-06-21T21:00:00.000Z Updated: 2024-09-17T01:37:09.704Z Open on db.gcve.eu Reference links https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/canon_wireless.rb http://www.mattandreko.com/2013/06/canon-y-u-no-security.html http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4613`	vulnerable	2026-06-08 05:04:48.736555	Details available The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has apparently responded by stating "for user convenience, the default setting does not require a password. However, if a user has a particular concern about third parties accessing the user's home printer, the default setting can be changed to add a password." Published: 2013-06-21T21:00:00.000Z Updated: 2024-09-16T17:27:45.686Z Open on db.gcve.eu Reference links http://www.mattandreko.com/2013/06/canon-y-u-no-security.html http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0146.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.