Kyocera Printer Information Disclosure Vulnerability (Mar 2022) - Active Check

Kyocera printers are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Xerox ColorQube 8580 安全漏洞

Xerox ColorQube 8580 is a multifunction printer from Xerox Corporation USA. A security vulnerability exists in the Xerox ColorQube 8580 that allows an attacker to print, view status, and obtain sensitive information...

CVE-2022-1026: Kyocera Net View Address Book Exposure

Rapid7 researcher Aaron Herndon has discovered that several models of Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function. This...

A week in security (March 21 – 27)

Last week on Malwarebytes Labs: Anti-war open-source software developer targets Russians and Belarussians with “protestware” Elden Ring exploit traps players in infinite death loop Update now! Many HP printers affected by three critical security vulnerabilities White House urges US businesses:...

HP Printer RCE Vulnerability (HPSBPI03780)

Multiple HP printer are prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

HP Printer Multiple Vulnerabilities (HPSBPI03781)

Multiple HP printer are prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

CVE-2022-24291

Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution...

(Pwn2Own) HP LaserJet Pro MFP M283fdw CFF Font Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of HP LaserJet Pro MFP M283fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PostScript interpreter. Crafted data in a CFF font can...

Canon imageCLASS MF644Cdw 10.02 printers 缓冲区错误漏洞

Canon imageCLASS MF644Cdw is an intelligent and efficient 3-in-1 color multifunction printer from Canon Japan. A security vulnerability exists in Canon imageCLASS MF644Cdw 10.02 printers, which originates from a failure to properly validate the length of user-supplied data before copying it to a...

CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

Exploit for CVE-2021-1675

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewa...

CVE-2021-33945

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpasupplicant.conf. This vulnerabili...

Stack overflow

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpasupplicant.conf. This vulnerabili...

CVE-2021-33945

CVE-2021-33945 affects Ricoh Printer series SP products (e.g., 320DN, 325DNw, 320SN, 320SFN, 325SNw, 325SFNw, 330SN, Aficio SP 3500SF, 221S, 220SNw, 221SNw, 221SF, 220SFNw, 221SFNw) where a stack buffer overflow in the file /etc/wpa_supplicant.conf is reported. This vulnerability allows attackers...

Xerox Phaser 缓冲区错误漏洞

The Xerox Phaser Series is a line of color and monochrome printers from Xerox Corporation in the United States. A security vulnerability exists in Xerox Phaser, which can be exploited by an attacker to cause a denial of service via a crafted overflow of data...

CVE-2021-33945: Out-of-bounds Write

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpasupplicant.conf. This vulnerabili...

PT-2022-10301

Name of the Vulnerable Software and Affected Versions RICOH Printer series SP products versions 1.06 Description The issue is a stack buffer overflow in the file /etc/wpa supplicant.conf, which allows attackers to cause a Denial of Service DoS via crafted overflow data. Recommendations For versio...

PT-2024-21122

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.7.4 Description The issue is related to the printer write function in the Linux kernel, specifically in the drivers/usb/gadget/function/f printer.c file. This function does not properly call usb ep queue, which...

HP JetAdvantage Management Connector – Elevation of Privilege v.01

HP JetAdvantage Management Connector software is potentially vulnerable to Elevation of Privilege when repair of the MSI is invoked. Update your printer software...