Lucene search
HistoryAug 28, 2009 - 3:30 p.m.
CVE-2008-7111
kyocera mita
km
3.3.0.1
scanner file utility
cve-2008-7111
remote code execution
file overwrite
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
9.7 High
AI Score
Confidence
High
0.045 Low
EPSS
Percentile
92.5%
The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109.
Affected configurations
Node
kyoceramitascanner_file_utilityMatch3.3.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| kyoceramita:scanner_file_utility | kyoceramita scanner file utility | eq | 3.3.0.1 |
Related
nvd
nvd
prion
prion
Code injection
2009-08-28 15:30:00
Directory traversal
2009-08-28 15:30:00
Authorization
2009-08-28 15:30:00
cvelist
cvelist
cve
cve
CVE-2008-7110
2009-08-28 15:30:00
CVE-2008-7109
2009-08-28 15:30:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
9.7 High
AI Score
Confidence
High
0.045 Low
EPSS
Percentile
92.5%
Related for CVE-2008-7111