CVE-2022-41807

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

多款Kyocera产品跨站脚本漏洞

The Kyocera ECOSYS Series and Kyocera FS Series are both a series of printers from Kyocera Japan. A security vulnerability exists in the Kyocera MFP 4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN versions, which can be exploited by an attacker to inject arbitrary scripts...

CVE-2022-41798

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with guessed session information. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...

Certain HP Printers may be vulnerable to 3DES Sweet32 Vulnerability

A recent firmware release, specifically FutureSmart 3.9.10, altered the cipher suite prioritization list placing the 3DES cipher into the HIGH prioritization cipher list. By default, this version 3.9.10 enables 3DES which is a “weak” cipher and may potentially allow the “Sweet32” vulnerability to...

CVE-2022-41830

CVE-2022-41830 describes a stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers. A remote authenticated attacker with administrative privileges can inject arbitrary script via the web interface. Affected products include TASKalfa and ECOSYS series (e.g., TASKa...

CVE-2022-41807

CVE-2022-41807 describes a missing authorization vulnerability in Kyocera Document Solutions MFPs and printers, allowing a network-adjacent attacker to alter product settings without authentication by sending a crafted request. The affected products span multiple Kyocera lines, including TASKalfa...

CVE-2022-41798

The CVE-2022-41798 issue affects Kyocera Document Solutions MFPs and printers, where session information is easily guessable. This could allow a network-adjacent attacker to log in by spoofing a user with guessed session data. Affected models span multiple product lines, including TASKalfa and EC...

Unspecified Vulnerability in Epson TM-C3500 and TM-C7500

The Epson TM-C3500 and Epson TM-C7500 are both printers from the Japanese company Epson. A security vulnerability exists in Epson TM-C3500 and TM-C7500 firmware version WAM31500, which can be exploited by an attacker to bypass authentication...

CVE-2021-3821

A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products...

CVE-2021-3821

A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products...

PT-2022-10698 · Hewlett Packard · Hp Multifunction Printers +1

Name of the Vulnerable Software and Affected Versions: HP multifunction printers MFPs affected versions not specified Description: A potential security issue has been identified that may cause Denial of Service when running HP Workpath solutions on certain products. Recommendations: At the moment...

CVE-2022-2794

Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack...

CVE-2022-2794

CVE-2022-2794 concerns HP PageWide Pro Printers, where the vulnerability could allow a denial-of-service condition. Public details in the NVD entry note a network-accessible issue with a high CVSS base score (7.5) and low attack complexity. HP has issued an advisory (HPSBPI03807) indicating firmw...

CVE-2022-2794

Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack...

CVE-2022-43780

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack...

CVE-2022-43780

CVE-2022-43780 affects HP ENVY, OfficeJet and DeskJet printers. Documents describe a Denial of Service vulnerability with network exposure (CVSSv3.1 base 7.5, HIGH). Affected component/root cause are not explicitly detailed in the provided sources. Remediation is recommended as a printer firmware...

PT-2022-27031 · Hewlett Packard · Hp Envy +2

Name of the Vulnerable Software and Affected Versions: HP ENVY, OfficeJet, and DeskJet printers affected versions not specified Description: The issue concerns a Denial of Service attack. There is no information provided about the estimated number of potentially affected devices worldwide or...

Certain HP ENVY, OfficeJet, DeskJet printers - Potential denial of service

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack. Update the printer firmware...

samba: server memory information leak via SMB1

A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file or printer instead of client-supplied data. The client cannot control the area of the...

samba: server memory information leak via SMB1

A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file or printer instead of client-supplied data. The client cannot control the area of the...