CVE-2022-45796

CVE-2022-45796 affects SHARP Digital Full-color Multifunctional System and related monochrome MFPs. The vulnerability is a command injection in the nw_interface.html component, enabling remote attackers with network access to execute arbitrary commands on affected devices. Affected versions inclu...

CVE-2022-43780

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack...

CVE-2022-43780

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack...

CVE-2022-2794

Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack...

CVE-2022-2794

Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack...

CVE-2021-3821

A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products...

CVE-2021-3821

A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products...

Denial of service

Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack...

Design/Logic Flaw

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack...

HP Color LaserJet Pro 安全漏洞

The HP Color LaserJet Pro is a line of color printers from Hewlett-Packard HP in the United States. The HP Color LaserJet Pro suffers from a security vulnerability that originates from an attacker being able to implement a denial of service...

HP Print Products 缓冲区错误漏洞

HP Print Products is a line of printers from Hewlett-Packard HP in the United States. A buffer error vulnerability exists in HP Print Products. An attacker could exploit this vulnerability to remotely execute code...

CVE-2022-41807

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

Cross site scripting

Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci,...

多款Kyocera产品安全漏洞

The Kyocera ECOSYS Series and Kyocera FS Series are both a series of printers from Kyocera, Japan. A security vulnerability exists in the Kyocera MFP 4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN versions, which stems from the presence of session information in the printers...

Certain HP Printers may be vulnerable to 3DES Sweet32 Vulnerability

A recent firmware release, specifically FutureSmart 3.9.10, altered the cipher suite prioritization list placing the 3DES cipher into the HIGH prioritization cipher list. By default, this version 3.9.10 enables 3DES which is a “weak” cipher and may potentially allow the “Sweet32” vulnerability to...

CVE-2022-41807

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

CVE-2022-41807

CVE-2022-41807 describes a missing authorization vulnerability in Kyocera Document Solutions MFPs and printers, allowing a network-adjacent attacker to alter product settings without authentication by sending a crafted request. The affected products span multiple Kyocera lines, including TASKalfa...

多款Kyocera产品跨站脚本漏洞

The Kyocera ECOSYS Series and Kyocera FS Series are both a series of printers from Kyocera Japan. A security vulnerability exists in the Kyocera MFP 4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN versions, which can be exploited by an attacker to inject arbitrary scripts...

CVE-2022-41798

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with guessed session information. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

CVE-2022-41830

CVE-2022-41830 describes a stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers. A remote authenticated attacker with administrative privileges can inject arbitrary script via the web interface. Affected products include TASKalfa and ECOSYS series (e.g., TASKa...