CVE-2019-13204

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by multiple buffer overflow vulnerabilities in the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS, and potentially execute arbitrary code on the device...

CVE-2019-13205

All configuration parameters of certain Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files th...

CVE-2019-13203

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or...

CVE-2019-13206

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

CVE-2019-13206

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

Buffer overflow

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

Design/Logic Flaw

All configuration parameters of certain Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files th...

CVE-2019-13195

The web application of some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders existed within the file system...

CVE-2019-13196

CVE-2019-13196 affects Kyocera ECOSYS M5526CDW (version 2R7_2000.001.701) where a buffer overflow in the web application’s arg4 and arg9 parameters could be triggered by an authenticated user. The vulnerability may cause Denial of Service and, potentially, arbitrary code execution on the device. ...

CVE-2019-13196

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in the arg4 and arg9 parameters of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

CVE-2019-13198

The CVE-2019-13198 vulnerability affects the web application of Kyocera ECOSYS M5526cdw (example 2R7_2000.001.701). It is a Stored XSS in the printer’s Web UI caused by insufficient input validation, which can lead to administrator session hijacking or execution of unintended actions. The connect...

CVE-2019-13199

CVE-2019-13199 affects Kyocera ECOSYS M5526CDW (example 2R7_2000.001.701). The CSRF protection is not implemented, enabling exploitation that can lead to takeover of a local account on the device. Multiple sources (NVD, Red Hat, CNVD, CNVD-derived entries, PRION, CVE listing) describe the vulnera...

CVE-2019-13200

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Reflected XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13200

CVE-2019-13200 affects the web application of Kyocera ECOSYS M5526CDW (example 2R7_2000.001.701). The vulnerability is Reflected XSS in the Web UI, arising from insufficient validation of client-side data, which can allow an attacker to hijack administrator sessions or perform unwanted actions wi...

CVE-2019-13201

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in the LPD service. This would allow an unauthenticated attacker to cause a Denial of Service DoS in the LPD service and potentially execute arbitrary code on the device...

CVE-2019-13202

CVE-2019-13202 affects Kyocera ECOSYS M5526cdw (2R7_2000.001.701 and related) via a buffer overflow in the web application’s okhtmlfile and failhtmlfile parameters. The vulnerability is triggered in several web functionalities, permitting an unauthenticated attacker to cause a Denial of Service (...

CVE-2019-13202

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in the okhtmlfile and failhtmlfile parameters of several functionalities of the web application that would allow an unauthenticated attacker to perform a Denial of Service attack,...

CVE-2019-13203

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or...

CVE-2019-13203

Some Kyocera printers, notably the ECOSYS M5526cdw with firmware 2R7_2000.001.701, are affected by an integer overflow in the arg3 parameter of several web-application functions. This vulnerability could allow an authenticated attacker to cause a Denial of Service (crashing the device) and potent...

CVE-2019-13205

All configuration parameters of certain Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files th...