Lucene search

K
jvnJapan Vulnerability NotesJVN:07427376
HistorySep 11, 2015 - 12:00 a.m.

JVN#07427376: PIXMA MG7500 Series vulnerable to cross-site request forgery

2015-09-1100:00:00
Japan Vulnerability Notes
jvn.jp
16

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

52.2%

PIXMA MG7500 Series provided by Canon Inc. contain a cross-site request forgery vulnerability.

Impact

If a user views a malicious page while logged into the Remote UI, unintended operations may be performed.

Solution

Apply a Workaround
The following workaround can mitigate the affects of this vulnerability.

  • Do not access other websites while logged into the Remote UI

Products Affected

  • Inkjet Printer PIXMA MG7500 Series

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

52.2%

Related for JVN:07427376