Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: KYOCERA Document Solutions Inc. Component: Ecosys M2535dn Firmware Clear all filters
TI-2022-20184 CVE-2022-41830 · GHSA-6qmr-4c46-qjhp

Cross-site scripting in Kyocera Document Solutions MFPs and printers

Priority LOW 23

Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0075 Published 2022-12-05 No fix listed CWE-79
TI-2022-20179 CVE-2022-41807 · GHSA-26rq-fvc6-cmqf

Missing authorization in Kyocera Document Solutions MFPs and printers

Priority LOW 29

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00431 Published 2022-12-05 No fix listed CWE-862
TI-2022-20171 CVE-2022-41798 · GHSA-h5j7-f7h8-6xm9

Authentication bypass by spoofing in Kyocera Document Solutions MFPs and printers

Priority LOW 29

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with guessed session info…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00517 Published 2022-12-05 No fix listed CWE-290