Kyocera M2035dn Pre-Auth LFI File Read

Reads arbitrary files from Kyocera Command Center RX ECOSYS M2035dn printers via /js/ traversal with a .jpg null suffix. !/usr/bin/env python3 -- coding: utf-8 -- """Kyocera Command Center RX ECOSYS M2035dn pre-auth LFI file read.""" from kittysploit import from lib.protocols.http.httpclient impo...

Kyocera Command Center RX ECOSYS M2035dn - Local File Inclusion Detection

Kyocera Command Center RX ECOSYS M2035dn is vulnerable to unauthenticated local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Kyocera Command Center RX ECOSYS M2035dn is vulnerable to unauthenticated local file inclusion.""" import re from kittysploit import from...

ECOSYS Command Center RX Panel - Detect

ECOSYS Command Center RX panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ECOSYS Command Center RX panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ECOSYS Command Center RX Panel -...

CVE-2022-50932

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932

CVE-2022-50932 affects Kyocera Command Center RX ECOSYS M2035dn. A directory traversal flaw on the /js/ path allows unauthenticated attackers to read sensitive files (e.g., /etc/passwd, /etc/shadow) by crafting traversal strings (including null-byte variants). Reported exploitation exists (e.g., ...

CVE-2022-50932 Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932 Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2022-50932: Improper Limitation of a Pathname to a Restricted Directory

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg...

CVE-2019-13198

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Stored XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2022-41830

Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci,...

CVE-2022-41798

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with guessed session information. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

Code injection

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with guessed session information. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

Multiple Kyocera products have security vulnerabilities

The Kyocera ECOSYS Series and Kyocera FS Series are both a series of printers from Kyocera, Japan. A security vulnerability exists in the Kyocera MFP 4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN versions, which stems from the presence of session information in the printers...

CVE-2022-41807

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

Multiple Kyocera products have cross-site scripting vulnerabilities

The Kyocera ECOSYS Series and Kyocera FS Series are both a series of printers from Kyocera Japan. A security vulnerability exists in the Kyocera MFP 4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN versions, which can be exploited by an attacker to inject arbitrary scripts...

Kyocera Command Center RX ECOSYS M2035dn Directory Traversal

Exploit Title: Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure Unauthenticated Author: Luis Martinez Discovery Date: 2022-02-10 Vendor Homepage: https://www.kyoceradocumentsolutions.com/asia/en/products/business-application/command-center-rx.html Tested Version:...

Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure Vulnerability

Exploit Title: Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure Unauthenticated Author: Luis Martinez Vendor Homepage: https://www.kyoceradocumentsolutions.com/asia/en/products/business-application/command-center-rx.html Tested Version: ECOSYS M2035dn Tested on: Linu...

Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

Exploit Title: Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure Unauthenticated Author: Luis Martinez Discovery Date: 2022-02-10 Vendor Homepage: https://www.kyoceradocumentsolutions.com/asia/en/products/business-application/command-center-rx.html Tested Version:...

Weak password vulnerability in KYOCERA ECOSYS M5520cdn

The ECOSYS M5520cdn is an all-in-one printer. A weak password vulnerability exists in the KYOCERA ECOSYS M5520cdn, which can be exploited by an attacker to obtain sensitive information...