Read the docs

KYOCERA Document Solutions Inc.

Records31All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

KYOCERA Document Solutions Inc. records in CISA KEV

No KYOCERA Document Solutions Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ecosys M5526cdw Firmware 12 records MEDIUM D-copia253mf Plus Firmware 4 records HIGH Ecosys M2535dn Firmware 3 records LOW Ecosys M6526cdn Firmware 3 records LOW Ecosys M6526cidn Firmware 3 records LOW Ecosys P2135dn Firmware 3 records LOW Ecosys P4040dn Firmware 3 records LOW Ecosys P6026cdn Firmware 3 records LOW

Records

3 records in Ecosys M2535dn Firmware · all components

TI-2022-20179 CVE-2022-41807 · GHSA-26rq-fvc6-cmqf

Missing authorization in Kyocera Document Solutions MFPs and printers

Priority LOW 29

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00431 Published 2022-12-05 No fix listed CWE-862
TI-2022-20171 CVE-2022-41798 · GHSA-h5j7-f7h8-6xm9

Authentication bypass by spoofing in Kyocera Document Solutions MFPs and printers

Priority LOW 29

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with guessed session info…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00517 Published 2022-12-05 No fix listed CWE-290
TI-2022-20184 CVE-2022-41830 · GHSA-6qmr-4c46-qjhp

Cross-site scripting in Kyocera Document Solutions MFPs and printers

Priority LOW 23

Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0075 Published 2022-12-05 No fix listed CWE-79
Open these records in search →