What is CVE-2019-14339?

CVE-2019-14339 is a medium-severity vulnerability in Canon Print. CVSS score: 5.5/10. Published 2019-09-05.

How severe is CVE-2019-14339?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Is CVE-2019-14339 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Canon Print

CVE-2019-14339

The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive information including factory passwords for the administrator web interface and WPA2-PSK key.

EPSS: 0.054 (91.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Canon Print — versions 2.5.5
N/a — versions n/a

Public proof-of-concept exploits

References

cve@mitre.org (Product, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-14339?: CVE-2019-14339 is a medium-severity vulnerability in Canon Print. CVSS score: 5.5/10. Published 2019-09-05.
How severe is CVE-2019-14339?: Medium severity. CVSS v3 base score is 5.5 out of 10.
Is CVE-2019-14339 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.