CVE-2013-4615
Description
The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service (device hang) via a crafted LAN_TXT24 parameter to English/pages_MacUS/cgi_lan.cgi followed by a direct request to English/pages_MacUS/lan_set_content.html. NOTE: the vendor has apparently responded by stating "Canon believes that its printers will not have to deal with unauthorized access to the network from an external location as long as the printers are used in a secured environment."
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| canon mg3100_printer | No range specified | — |
| canon mg5300_printer | No range specified | — |
| canon mg6100_printer | No range specified | — |
| canon mp340_printer | No range specified | — |
| canon mp495_printer | No range specified | — |
| canon mx870_printer | No range specified | — |
| canon mx890_printer | No range specified | — |
| canon mx920_printer | No range specified | — |
| canon mx922_printer | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.