CVE-2025-63579: Exposure of Sensitive Information to an Unauthorized Actor

Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...

CVE-2022-50932: Improper Limitation of a Pathname to a Restricted Directory

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

PT-2025-38437

Name of the Vulnerable Software and Affected Versions Kyocera Command Center RX EXOSYS M5521cdn affected versions not specified Description An issue in the user interface allows remote attackers to obtain sensitive information by inspecting sent packages. Recommendations At the moment, there is n...

CVE-2023-49367: Exposure of Sensitive Information to an Unauthorized Actor

An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent packages by user...

Multiple vulnerabilities in Command Center RX (CCRX) of Kyocera Document Solutions MFPs and printers

Overview Command Center RX CCRX, a web interface for MFPs and printers provided by KYOCERA Document Solutions Inc., contains multiple vulnerabilities listed below. Path traversal CWE-22 - CVE-2023-34259 Path traversal CWE-22 - CVE-2023-34260 Observable response discrepancy CWE-204 - CVE-2023-3426...

Kyocera Command Center RX 路径遍历漏洞

Kyocera Command Center RX is a centralized printer management tool from Kyocera, Japan. The product is mainly used to manage and monitor printers on a local area network LAN. A path traversal vulnerability exists in Kyocera Command Center RX, which can be exploited by remote attackers to obtain...

PT-2019-18096

Name of the Vulnerable Software and Affected Versions Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci affected versions not specified Description The issue allows remote attackers to obtain a cleartext FTP or SMB password by abusing the Test button in the machine address book...

CVE-2019-6452: Insufficiently Protected Credentials

Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machine address book to obtain a cleartext FTP or SMB password...