Kyocera M2035dn Pre-Auth LFI File Read

Reads arbitrary files from Kyocera Command Center RX ECOSYS M2035dn printers via /js/ traversal with a .jpg null suffix. !/usr/bin/env python3 -- coding: utf-8 -- """Kyocera Command Center RX ECOSYS M2035dn pre-auth LFI file read.""" from kittysploit import from lib.protocols.http.httpclient impo...

Kyocera Command Center RX ECOSYS M2035dn - Local File Inclusion Detection

Kyocera Command Center RX ECOSYS M2035dn is vulnerable to unauthenticated local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Kyocera Command Center RX ECOSYS M2035dn is vulnerable to unauthenticated local file inclusion.""" import re from kittysploit import from...

ECOSYS Command Center RX Panel - Detect

ECOSYS Command Center RX panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ECOSYS Command Center RX panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ECOSYS Command Center RX Panel -...

CVE-2025-63579: Exposure of Sensitive Information to an Unauthorized Actor

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

CVE-2022-50932: Improper Limitation of a Pathname to a Restricted Directory

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

PT-2025-38437

Name of the Vulnerable Software and Affected Versions Kyocera Command Center RX EXOSYS M5521cdn affected versions not specified Description An issue in the user interface allows remote attackers to obtain sensitive information by inspecting sent packages. Recommendations At the moment, there is n...

CVE-2023-49367: Exposure of Sensitive Information to an Unauthorized Actor

An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent packages by user...

Multiple vulnerabilities in Command Center RX (CCRX) of Kyocera Document Solutions MFPs and printers

Overview Command Center RX CCRX, a web interface for MFPs and printers provided by KYOCERA Document Solutions Inc., contains multiple vulnerabilities listed below. Path traversal CWE-22 - CVE-2023-34259 Path traversal CWE-22 - CVE-2023-34260 Observable response discrepancy CWE-204 - CVE-2023-3426...

Kyocera Command Center RX path traversal vulnerability

Kyocera Command Center RX is a centralized printer management tool from Kyocera, Japan. The product is mainly used to manage and monitor printers on a local area network LAN. A path traversal vulnerability exists in Kyocera Command Center RX, which can be exploited by remote attackers to obtain...

PT-2019-18096

Name of the Vulnerable Software and Affected Versions Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci affected versions not specified Description The issue allows remote attackers to obtain a cleartext FTP or SMB password by abusing the Test button in the machine address book...

CVE-2019-6452: Insufficiently Protected Credentials

Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machine address book to obtain a cleartext FTP or SMB password...