Kyocera
31 CVEs across 105 Kyocera products. Browse Kyocera vulnerabilities, severities, and proof-of-concept exploits.
Kyocera products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-50932 | High | 7.5 | 2026-01-13 | Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by m… |
CVE-2019-25254 | High | 8.8 | 2025-12-24 | KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request vali… |
CVE-2019-25253 | High | 7.5 | 2025-12-24 | KYOCERA Net Admin 3.4.0906 contains an XML External Entity (XXE) injection vulnerability in the Multi-Set Template Editor that allows unauthenticated attackers… |
CVE-2023-50916 | High | 7.2 | 2024-01-10 | Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. I… |
CVE-2023-34261 | Medium | 5.3 | 2023-11-03 | Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow identification of valid user accounts via username enumeration because they lead to a "nicht ei… |
CVE-2023-34260 | High | 7.5 | 2023-11-03 | Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed by a directory refe… |
CVE-2023-34259 | Medium | 4.9 | 2023-11-03 | Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the filesystem, even f… |
CVE-2023-25954 | Medium | 5.5 | 2023-04-13 | KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vul… |
CVE-2022-41830 | Medium | 4.8 | 2022-12-05 | Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privile… |
CVE-2022-41807 | Medium | 6.5 | 2022-12-05 | Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product se… |
CVE-2022-41798 | Medium | 6.5 | 2022-12-05 | Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log i… |
CVE-2022-1026 | High | 8.6 | 2022-04-04 | Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, th… |
CVE-2020-23575 | High | 7.5 | 2021-05-10 | A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful exploitation of this vulnerability could allow an attacker to retri… |
CVE-2020-25890 | Medium | 6.1 | 2020-11-17 | The web application of Kyocera printer (ECOSYS M2640IDW) is affected by Stored XSS vulnerability, discovered in the addition a new contact in "Machine Address… |
CVE-2019-13202 | Critical | 9.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the okhtmlfile and failhtmlfile parame… |
CVE-2019-13201 | Critical | 9.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the LPD service. This would allow an u… |
CVE-2019-13200 | Medium | 6.1 | 2020-03-13 | The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Reflected XSS. Successful exploitation of this v… |
CVE-2019-13199 | Medium | 6.5 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) did not implement any mechanism to avoid CSRF. Successful exploitation of this vulnerabili… |
CVE-2019-13198 | Medium | 6.1 | 2020-03-13 | The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Stored XSS. Successful exploitation of this vuln… |
CVE-2019-13197 | Critical | 9.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the URI paths of the web application t… |
CVE-2019-13196 | High | 8.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the arg4 and arg9 parameters of severa… |
CVE-2019-13195 | High | 7.5 | 2020-03-13 | The web application of some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was vulnerable to path traversal, allowing an unauthenticated user… |
CVE-2019-13206 | High | 8.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in multiple parameters of the Document Bo… |
CVE-2019-13205 | High | 7.5 | 2020-03-13 | All configuration parameters of certain Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were accessible by unauthenticated users. This informat… |
CVE-2019-13204 | Critical | 9.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by multiple buffer overflow vulnerabilities in the IPP service. This would a… |
CVE-2019-13203 | High | 8.8 | 2020-03-13 | Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by an integer overflow vulnerability in the arg3 parameter of several functi… |
CVE-2019-6452 | High | 8.8 | 2019-06-06 | Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machine address book to obtain a cleartext F… |
CVE-2018-16656 | High | 7.5 | 2019-05-14 | DoBox_CstmBox_Info.model.htm on Kyocera TASKalfa 4002i and 6002i devices allows remote attackers to read the documents of arbitrary users via a modified HTTP r… |
CVE-2012-5174 | | 2012-11-30 | The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial of service (persistent reboot) via an e-… | |
CVE-2006-0789 | | 2006-02-19 | Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an administrative menu via a… | |
CVE-2006-0788 | | 2006-02-19 | Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration settings via strings that begin with "!R!SIO… |