Path traversal

The web application of some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders existed within the file system...

Design/Logic Flaw

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Reflected XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

Buffer overflow

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow an attacker to execute arbitrary code on the device...

CVE-2019-13167

CVE-2019-13167 involves multiple stored XSS flaws in the Xerox Web Application used by Phaser 3320 (V53.006.16.000) and other printers. The underlying issue is cross-site scripting stored in the web interface, allowing an attacker to perform actions on behalf of an administrator or trigger unwant...

CVE-2019-13169

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the web application that would allow an attacker to execute arbitrary code on the device...

CVE-2019-13203

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or...

CVE-2019-13203

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or...

CVE-2019-13206

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

CVE-2019-13206

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

Integer overflow

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or...

Buffer overflow

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

CVE-2019-13172

CVE-2019-13172 concerns a buffer overflow vulnerability in the Authentication Cookie of the web application on some Xerox printers (e.g., Phaser 3320 with firmware 53.006.16.000). The underlying issue allows an attacker to execute arbitrary code on the device. Documents consistently describe the ...

CVE-2019-13172

Some Xerox printers such as the Phaser 3320 V53.006.16.000 were affected by a buffer overflow vulnerability in the Authentication Cookie of the web application that would allow an attacker to execute arbitrary code on the device...

CVE-2019-13195

The web application of some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders existed within the file system...

CVE-2019-13195

The CVE-2019-13195 entry describes a path traversal vulnerability in the web application of Kyocera ECOSYS M5526CDW (e.g., 2R7_2000.001.701). The vulnerability allows an unauthenticated user to retrieve arbitrary files or check for file/folder existence outside a restricted directory due to insuf...

CVE-2019-13196

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in the arg4 and arg9 parameters of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the devic...

CVE-2019-13196

CVE-2019-13196 affects Kyocera ECOSYS M5526CDW (version 2R7_2000.001.701) where a buffer overflow in the web application’s arg4 and arg9 parameters could be triggered by an authenticated user. The vulnerability may cause Denial of Service and, potentially, arbitrary code execution on the device. ...

CVE-2019-13197

CVE-2019-13197 affects Kyocera ECOSYS M5526CDW and similar printers. A buffer overflow in the URI paths of the web application allows an unauthenticated attacker to perform a Denial of Service and, potentially, execute arbitrary code on the device. Affected version reference observed is 2R7_2000....

CVE-2019-13197

Some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 were affected by a buffer overflow vulnerability in the URI paths of the web application that would allow an unauthenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code...

CVE-2019-13198

The CVE-2019-13198 vulnerability affects the web application of Kyocera ECOSYS M5526cdw (example 2R7_2000.001.701). It is a Stored XSS in the printer’s Web UI caused by insufficient input validation, which can lead to administrator session hijacking or execution of unintended actions. The connect...