What is the CVSS score of CVE-2013-4615?

CVE-2013-4615 has a CVSS 2.0 base score of 5.0 (Medium). CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. EPSS exploitation probability: 63.3%.

Is there a public PoC exploit available for CVE-2013-4615?

Yes, a public proof-of-concept exploit is available for CVE-2013-4615. Prioritise patching immediately. EPSS: 63.3%.

Mg3100 Printer CVE-2013-4615

MEDIUM

Improper Input Validation (CWE-20)

2013-06-21 cve@mitre.org

Denial Of Service Authentication Bypass Mg3100 Printer Mg5300 Printer Mg6100 Printer Mp340 Printer Mp495 Printer Mx870 Printer Mx890 Printer Mx920 Printer Mx922 Printer

5.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:N/A:P

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Jun 21, 2013 - 21:55 cve.org

MEDIUM 5.0

DescriptionCVE.org

The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service (device hang) via a crafted LAN_TXT24 parameter to English/pages_MacUS/cgi_lan.cgi followed by a direct request to English/pages_MacUS/lan_set_content.html. NOTE: the vendor has apparently responded by stating "Canon believes that its printers will not have to deal with unauthorized access to the network from an external location as long as the printers are used in a secured environment."

AnalysisAI

The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service (device hang) via a crafted LAN_TXT24 parameter to. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 63.3%.

Technical ContextAI

This vulnerability is classified under CWE-20. The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service (device hang) via a crafted LAN_TXT24 parameter to English/pages_MacUS/cgi_lan.cgi followed by a direct request to English/pages_MacUS/lan_set_content.html. NOTE: the vendor has apparently responded by stating "Canon believes that its printers will not have to deal with unauthorized access to the network from an external location as long as the printers are used in a secured environment." Affected products include: Canon Mg3100 Printer, Canon Mg5300 Printer, Canon Mg6100 Printer, Canon Mp340 Printer, Canon Mp495 Printer.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.