Lucene search

MitreCVE-2019-13195

HistoryMar 13, 2020 - 7:15 p.m.

CVE-2019-13195

2020-03-1319:15:16

CWE-22

mitre

web.nvd.nist.gov

kyocera

printer

web application

vulnerability

unauthenticated

file retrieval

nvd

cve-2019-13195

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

64.4%

JSON

The web application of some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders existed within the file system.

Affected configurations

Nvd

Node

kyoceraecosys_m5526cdwMatch-

AND

kyoceraecosys_m5526cdw_firmwareMatch2r7_2000.001.701

VendorProductVersionCPE
kyoceraecosys_m5526cdw-cpe:2.3:h:kyocera:ecosys_m5526cdw:-:*:*:*:*:*:*:*
kyoceraecosys_m5526cdw_firmware2r7_2000.001.701cpe:2.3:o:kyocera:ecosys_m5526cdw_firmware:2r7_2000.001.701:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kyocera	ecosys_m5526cdw	-	cpe:2.3:h:kyocera:ecosys_m5526cdw:-:::::::*
kyocera	ecosys_m5526cdw_firmware	2r7_2000.001.701	cpe:2.3:o:kyocera:ecosys_m5526cdw_firmware:2r7_2000.001.701:::::::*

References

www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

64.4%

JSON

Related for CVE-2019-13195