CVE-2013-4614
Canon MG3100/MG5300/MG6100/MP495/MX340/MX870/MX890/MX920/MX922 - Cleartext Wi-Fi PSK Exposure
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-4614.
PoCs published by Matt, including Metasploit module auxiliary/scanner/http/canon_wireless.
AI-analyzed exploit summary This Metasploit module enumerates wireless credentials from Canon printers by querying specific HTML endpoints. It extracts SSID, encryption type, and keys from the printer's web interface without requiring authentication.
Description
English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows the Wi-Fi PSK passphrase in cleartext, which allows physically proximate attackers to obtain sensitive information by reading the screen of an unattended workstation.
Exploits (1)
This Metasploit module enumerates wireless credentials from Canon printers by querying specific HTML endpoints. It extracts SSID, encryption type, and keys from the printer's web interface without requiring authentication.