WID-SEC-W-2022-0551

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Kyocera Drucker: Mehrere Schwachstellen

view advisory published 2022-07-03

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Kyocera Druckern ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scritping Angriff durchzuführen und einen Denial of Service Zustand herbeizuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2022-25344USmedium6.1—
An XSS issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application doesn't properly check parameters, sent in a /dvcset/sysset/set.cgi POST reques…
CVE-2022-0778UShigh7.5Exploit
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsi…
CVE-2021-39238UScritical9.8—
Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan