Read the docs
TI-2022-20179 Aliases CVE-2022-41807GHSA-26rq-fvc6-cmqf

Missing authorization in Kyocera Document Solutions MFPs and printers

Priority LOW 29CWE-862Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-862.

Summary

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00431 37th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
KYOCERA Document Solutions Inc.Kyocera Document Solutions MFPs and printersA wide range of products is affected. For the specific products/versions information, see the URL provided by the vendor which is listed in [Reference] section.—No fix listedCNA
  • Kyocera Document Solutions MFPs and printers VendorKYOCERA Document Solutions Inc. Affected A wide range of products is affected. For the specific products/versions information, see the URL provided by the vendor which is listed in [Reference] section. Fixed in — No fix listed CNA

CPE configurations NVD · 80

CPEVersionsRoleVendor
cpe:2.3:o:kyocera:taskalfa_7550ci_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_7550ci:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_6550ci_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_6550ci:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_5550ci_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_5550ci:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_4550ci_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_4550ci:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_3550ci_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_3550ci:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
Show 70 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:kyocera:taskalfa_3050ci_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_3050ci:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_255c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_255c:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_205c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_205c:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_256ci_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_256ci:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_206ci_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_206ci:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ecosys_m6526cdn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ecosys_m6526cdn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ecosys_m6526cidn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ecosys_m6526cidn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:fs-c2126mfp_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:fs-c2126mfp:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:fs-c2126mfp\+_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:fs-c2126mfp\+:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:fs-c2026mfp_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:fs-c2026mfp:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_8000i_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_8000i:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_6500i_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_6500i:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_5500i_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_5500i:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_4500i_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_4500i:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_3500i_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_3500i:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_305_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_305:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_255_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_255:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_306i_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_306i:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:taskalfa_256i_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:taskalfa_256i:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-3140mfp_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-3140mfp:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-3140mfp\+_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-3140mfp\+:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-3640mfp_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-3640mfp:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ecosys_m2535dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ecosys_m2535dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-1135mfp_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-1135mfp:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-1035mfp_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-1035mfp:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-c8650dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-c8650dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-c8600dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-c8600dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ecosys_p6026cdn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ecosys_p6026cdn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:fs-c5250dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:fs-c5250dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-4300dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-4300dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-4200dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-4200dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ls-2100dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ls-2100dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ecosys_p4040dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ecosys_p4040dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:ecosys_p2135dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:ecosys_p2135dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.
cpe:2.3:o:kyocera:fs-1370dn_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableKYOCERA Document Solutions Inc.
cpe:2.3:h:kyocera:fs-1370dn:-:*:*:*:*:*:*:*not specified by NVDRunning onKYOCERA Document Solutions Inc.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-41807
  2. 2026-10-03 Alias added: GHSA-26rq-fvc6-cmqf

References

  • TI-2022-20171 Authentication bypass by spoofing in Kyocera Document Solutions MFPs and printers CVSS 3.1MEDIUM 6.5
  • TI-2022-20184 Cross-site scripting in Kyocera Document Solutions MFPs and printers CVSS 3.1MEDIUM 4.8

Sources