Lucene search

K
nvd[email protected]NVD:CVE-2023-34260
HistoryNov 03, 2023 - 4:15 a.m.

CVE-2023-34260

2023-11-0304:15:20
CWE-22
web.nvd.nist.gov
7
kyocera
taskalfa 4053ci
denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.003

Percentile

68.0%

Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed by a directory reference such as %2fetc%00index.htm to try to read the /etc directory.

Affected configurations

Nvd
Node
kyocerad-copia253mf_plus_firmwareRange2vg_s000.002.561
AND
kyocerad-copia253mf_plusMatch-
VendorProductVersionCPE
kyocerad-copia253mf_plus_firmware*cpe:2.3:o:kyocera:d-copia253mf_plus_firmware:*:*:*:*:*:*:*:*
kyocerad-copia253mf_plus-cpe:2.3:h:kyocera:d-copia253mf_plus:-:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.003

Percentile

68.0%

Related for NVD:CVE-2023-34260