CVE-2019-13171

CVE-2019-13171 affects some Xerox printers (e.g., Phaser 3320) due to stack-based buffer overflows in the Google Cloud Print implementation. The root cause is insecure handling of the register parameters and an unchecked memcpy() size, which can allow an unauthenticated attacker to execute arbitr...

CVE-2019-13205

All configuration parameters of certain Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files th...

CVE-2019-13204

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by multiple buffer overflow vulnerabilities in the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS, and potentially execute arbitrary code on the device...

CVE-2019-13205

All configuration parameters of certain Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files th...

CVE-2019-13206

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

CVE-2019-13206

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

CVE-2019-13203

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or...

CVE-2019-13203

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or...

CVE-2019-13204

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by multiple buffer overflow vulnerabilities in the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service DoS, and potentially execute arbitrary code on the device...

Buffer overflow

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

Design/Logic Flaw

All configuration parameters of certain Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files th...

CVE-2019-13195

The web application of some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders existed within the file system...

CVE-2019-13196

CVE-2019-13196 affects Kyocera ECOSYS M5526CDW (version 2R7_2000.001.701) where a buffer overflow in the web application’s arg4 and arg9 parameters could be triggered by an authenticated user. The vulnerability may cause Denial of Service and, potentially, arbitrary code execution on the device. ...

CVE-2019-13196

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in the arg4 and arg9 parameters of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

CVE-2019-13198

The CVE-2019-13198 vulnerability affects the web application of Kyocera ECOSYS M5526cdw (example 2R7_2000.001.701). It is a Stored XSS in the printer’s Web UI caused by insufficient input validation, which can lead to administrator session hijacking or execution of unintended actions. The connect...

CVE-2019-13199

CVE-2019-13199 affects Kyocera ECOSYS M5526CDW (example 2R7_2000.001.701). The CSRF protection is not implemented, enabling exploitation that can lead to takeover of a local account on the device. Multiple sources (NVD, Red Hat, CNVD, CNVD-derived entries, PRION, CVE listing) describe the vulnera...

CVE-2019-13200

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Reflected XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13200

CVE-2019-13200 affects the web application of Kyocera ECOSYS M5526CDW (example 2R7_2000.001.701). The vulnerability is Reflected XSS in the Web UI, arising from insufficient validation of client-side data, which can allow an attacker to hijack administrator sessions or perform unwanted actions wi...

CVE-2019-13201

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in the LPD service. This would allow an unauthenticated attacker to cause a Denial of Service DoS in the LPD service and potentially execute arbitrary code on the device...

CVE-2019-13202

CVE-2019-13202 affects Kyocera ECOSYS M5526cdw (2R7_2000.001.701 and related) via a buffer overflow in the web application’s okhtmlfile and failhtmlfile parameters. The vulnerability is triggered in several web functionalities, permitting an unauthenticated attacker to cause a Denial of Service (...