Priority LOW 39
The web application of some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders exi…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03465 · Published 2020-03-13 · No fix listed CWE-22
Priority MEDIUM 42
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the arg4 and arg9 parameters of several functionalities of the web application that would allow an…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02182 · Published 2020-03-13 · No fix listed CWE-120
Priority MEDIUM 47
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the URI paths of the web application that would allow an unauthenticated attacker to perform a Deni…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02653 · Published 2020-03-13 · No fix listed CWE-120
Priority LOW 30
The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Stored XSS.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01356 · Published 2020-03-13 · No fix listed CWE-79
Priority LOW 30
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) did not implement any mechanism to avoid CSRF.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00551 · Published 2020-03-13 · No fix listed CWE-352
Priority LOW 30
The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Reflected XSS.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01356 · Published 2020-03-13 · No fix listed CWE-79
Priority MEDIUM 47
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the LPD service.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02653 · Published 2020-03-13 · No fix listed CWE-120
Priority MEDIUM 47
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the okhtmlfile and failhtmlfile parameters of several functionalities of the web application that w…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02653 · Published 2020-03-13 · No fix listed CWE-120
Priority MEDIUM 42
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenti…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01901 · Published 2020-03-13 · No fix listed CWE-190
Priority MEDIUM 47
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by multiple buffer overflow vulnerabilities in the IPP service.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02653 · Published 2020-03-13 · No fix listed CWE-120
Priority LOW 35
All configuration parameters of certain Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were accessible by unauthenticated users.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01114 · Published 2020-03-13 · No fix listed CWE-306
Priority MEDIUM 42
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01974 · Published 2020-03-13 · No fix listed CWE-120