CVE-2023-1763 - OpenCVE

Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8) allows an attacker to acquire sensitive information on the Wi-Fi connection setup of the printer from the software.

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Canon	Ij Network Tool
Apple	Mac Os X Macos

Configuration 1 [-]

AND

cpe:2.3:a:canon:ij_network_tool:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:a:canon:ij_network_tool:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:mac_os_x::::::::
	cpe:2.3:o:apple:macos::::::::

References

Link	Resource
https://psirt.canon/advisory-information/cp2023-002/
https://psirt.canon/hardening/

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: Canon

Published: 2023-05-17T00:00:00

Updated: 2023-05-17T00:00:00

Reserved: 2023-03-31T00:00:00

Link: CVE-2023-1763

JSON object: View

NVD Information

Status : Modified

Published: 2023-05-17T01:15:09.833

Modified: 2023-11-07T04:04:50.347

Link: CVE-2023-1763

JSON object: View

Redhat Information

No data.

CWE

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:canon:ij_network_tool:*:*:*:*:*:*:*:*", "matchCriteriaId": "DC627799-7AAF-4E74-A613-C5EC58573C09", "versionEndIncluding": "4.7.3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "matchCriteriaId": "31B4A6B5-50CC-4B40-86F8-E2CF40C3582E", "versionEndIncluding": "10.8.0", "versionStartIncluding": "10.7.5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:canon:ij_network_tool:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D45F7B8-4556-4318-8941-3D8CC44734C4", "versionEndIncluding": "4.7.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "matchCriteriaId": "DF57DBD2-F98D-48A4-90AA-39986C963B04", "versionEndIncluding": "10.15", "versionStartIncluding": "10.9.5", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "matchCriteriaId": "13D9BE5E-15FA-45EF-8F21-EC2AE8B1F52F", "versionEndIncluding": "13.0", "versionStartIncluding": "11.0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8) allows an attacker to acquire sensitive information on the Wi-Fi connection setup of the printer from the software."}], "id": "CVE-2023-1763", "lastModified": "2023-11-07T04:04:50.347", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary"}]}, "published": "2023-05-17T01:15:09.833", "references": [{"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://psirt.canon/advisory-information/cp2023-002/"}, {"source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "url": "https://psirt.canon/hardening/"}], "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-522"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-549"}], "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd", "type": "Secondary"}]}