Vulnerabilities > CVE-2022-41807 - Missing Authorization vulnerability in Kyocera products
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- https://jvn.jp/en/jp/JVN46345126/index.html
- https://jvn.jp/en/jp/JVN46345126/index.html
- https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html
- https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html
- https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html
- https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html