CVE-2022-41807 - Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request

Back Back to CVE browser

MEDIUM

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request

Published Dec 5, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.

Affected products

Vendor KYOCERA Document Solutions Inc. Product Kyocera Document Solutions MFPs and printers Default
n/a
- Version
  A wide range of products is affected. For the specific products/versions information, see the URL provided by the vendor which is listed in [Reference] section.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

KYOCERA Document Solutions Inc.

Kyocera Document Solutions MFPs and printers

n/a

Version	Status	Constraints
A wide range of products is affected. For the specific products/versions information, see the URL provided by the vendor which is listed in [Reference] section.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44975
Advisory
https://jvn.jp/en/jp/JVN46345126/index.html
Vendor Advisory
https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html
MitigationVendor Advisory
https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44975		Advisory
https://jvn.jp/en/jp/JVN46345126/index.html		Vendor Advisory
https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html		MitigationVendor Advisory
https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html		Third Party Advisory