CVE-2018-16656

CVE-2018-16656 affects Kyocera TASKalfa 4002i and 6002i devices, where the DoBox_CstmBox_Info.model.htm component can be manipulated via HTTP to read other users’ documents. The available connected data identify the affected models and the root cause as improper handling of a modified HTTP reques...

CVE-2018-16656: Exposure of Sensitive Information to an Unauthorized Actor

DoBoxCstmBoxInfo.model.htm on Kyocera TASKalfa 4002i and 6002i devices allows remote attackers to read the documents of arbitrary users via a modified HTTP request...