kbrain

CVE-2013-4613

HIGH · CVSS 7.5EPSS 2.0%EU EUVD

The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has apparently responded by stating "for user convenience, the default setting does not require a password. However, if a user has a particular concern about third parties accessing the user's home printer, the default setting can be changed to add a password."

Key facts

CVSS score
7.5 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness (CWE)
CWE-264
EPSS score
2.0% (81th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2013-4469)
Published
June 21, 2013
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2013-4469 in the EU Vulnerability Database. Last updated in EUVD on September 16, 2024.

View on the EU Vulnerability Database

Affected products

  • canon / mg3100 printer
  • canon / mg5300 printer
  • canon / mg6100 printer
  • canon / mp340 printer
  • canon / mp495 printer
  • canon / mx870 printer
  • canon / mx890 printer
  • canon / mx920 printer
  • canon / mx922 printer

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain