CVE-2019-13205

CVE-2019-13205 affects Kyocera printers (e.g., ECOSYS M5526cdw with firmware 2R7_2000.001.701). Unauthenticated users could access configuration parameters; information was shown only to authenticated users in menus, yet the underlying files containing parameters (including users, community strin...

CVE-2019-13206

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

CVE-2019-13206

CVE-2019-13206 affects Kyocera ECOSYS M5526CDW (2R7_2000.001.701) where a buffer overflow in multiple parameters of the web-based Document Boxes function can be triggered by an authenticated user, enabling Denial of Service (crash) and potentially arbitrary code execution. The connected sources c...

PT-2020-9382 · Brother · Brother Printers

Name of the Vulnerable Software and Affected Versions: Brother printers versions 1.20 Description: A stack buffer overflow issue exists due to the web server not properly parsing the cookie value, allowing an attacker to execute arbitrary code on the device. Recommendations: For version 1.20,...

PT-2020-9381 · Brother · Brother Printers

Name of the Vulnerable Software and Affected Versions: Brother printers versions prior to the fixed version Description: The issue is related to a heap buffer overflow vulnerability in the IPP service of some Brother printers, which did not parse attribute names properly. This would allow an...

Unable to map printers using Citrix policies from the cloud hosted Citrix Studio

Steps to reproduce the error: 1. Login to Citrix cloud portal and launch the Studio. 2. Select the Policies Tab in the cloud hosted Studio. 3. Navigate to Session printers and add new printer. 4. Browse the Print server using the UNC path and click browse. 5. It times out 6. If the server and the...

Cross-site scripting vulnerability in multiple Lexmark products (CNVD-2020-19522)

The Lexmark CS31x, among others, is a printer from Lexmark USA. A cross-site scripting vulnerability exists in the web server built into several Lexmark products, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

HPSBPI03653 rev. 1 - HP LaserJet Software Solution Elevation of Privilege for Certain HP LaserJet Printers

Potential Security Impact Elevation of privilege Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY A potential security vulnerability has been identified for HP LaserJet Solution Software for certain HP LaserJet Printers which may lead to unauthorized elevation of privilege...

Improper Authentication Vulnerability in RICOH printers

Overview Multiple RICOH printers contain Improper Authentication Vulnerability CWE-287. RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership. Impac...

Improper Access Control Vulnerability in RICOH printers

Overview Multiple RICOH printers contain Improper Access Control CWE-284. RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership. Impact A user who c...

Cross-site Request Forgery Vulnerability in RICOH printers

Overview Multiple RICOH printers contain Cross-site Request Forgery CWE-352. RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership. Impact If a user...

Information Disclosure Vulnerability in RICOH printers

Overview Multiple RICOH printers contain Information Disclosure CWE-200. RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership. Impact A user who ca...

Multiple RICOH Printer Driver Elevation of Privilege Vulnerabilities

Generic PCL5 Driver, PC FAX Generic Driver, PCL6 PCL XL Driver are RICOH printer drivers. An elevation of privilege vulnerability exists in multiple RICOH printer drivers. An attacker could exploit this vulnerability to gain elevation of privilege...

JVN#52962201: Multiple vulnerabilities in RICOH printers

Multiple RICOH printers contain multiple vulnerabilities listed below. Information Disclosure CWE-200 - CVE-CVE-2019-14301 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| Base Score: 6.5 CVSS v2| AV:A/AC:L/Au:N/C:P/I:N/A:N| Base Score: 3.3 Improper Access...

Printers assigned to users through WEM are not created in ICA, RDP and console sessions

Printers assigned to users through WEM are not created in ICA, RDP and console sessions...

CVE-2020-9330

Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who gains access to affected devices e.g., by using default credentials can change the LDAP connection IP...

CVE-2020-9330

Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who gains access to affected devices e.g., by using default credentials can change the LDAP connection IP...

CVE-2020-9330

Xerox WorkCentre printers pre-073.xxx.000.02300 are affected: changing the LDAP connector IP without revalidating credentials allows plaintext LDAP credentials to be sent to an attacker, who could gain AD access. Affected models include 3655*, 3655i*, 58XX*, 58XXi*, 59XX*, 59XXi*, 6655**, 6655i**...

Printers created from WEM are not being mapped to user sessions

Printers created from WEM are not being mapped to user sessions. VUEMRSAV shows the printers under Actions Applied. WEM session log shows the following error regarding to the printers affected: DynamicTokensController.ReplaceDynamicTokens : Replacing HashTags - no match found for :...

Lexmark printer cross-site scripting vulnerability

Lexmark printers is a printer product of Lexmark USA. A cross-site scripting vulnerability exists in the Lexmark printer MS812 and several previous series printers. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...