CVE-2013-4615: Improper Input Validation

The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service device hang via a crafted LANTXT24 parameter to English/pagesMacUS/cgilan.cgi followed by a direct request to English/pagesMacUS/lansetcontent.html. NOTE: th...

CVE-2013-4613: Undefined Security Weakness

The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has...

CVE-2013-4614: Undefined Security Weakness

English/pagesMacUS/wlssetcontent.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended...

Canon Printer Wireless Configuration Disclosure

This module enumerates wireless credentials from Canon printers with a web interface. It has been tested on Canon models: MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920. Module Options msf use auxiliary/scanner/http/canon/wireless msf undefinedwireless show actions ...actions... msf...