CVE-2023-50916

CVE-2023-50916 affects Kyocera Device Manager versions prior to 3.1.1213.0. The issue enables NTLM credential exposure during UNC path authentication when the backup location for the application database is configured to a UNC path. The GUI rejects UNC paths due to a backslash check, but intercep...

Alert: New Vulnerabilities Discovered in QNAP and Kyocera Device Manager

A security flaw has been disclosed in Kyocera's Device Manager product that could be exploited by bad actors to carry out malicious activities on affected systems. "This vulnerability allows attackers to coerce authentication attempts to their own resources, such as a malicious SMB share, to...