NetSight
IP …
medium6.5

CVE-2022-41798

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log i…

Impact

Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with guessed session information. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.

Affected products

VendorProductAffected versions
KyoceraTaskalfa 7550ci Firmware
All versions
KyoceraTaskalfa 6550ci Firmware
All versions
KyoceraTaskalfa 5550ci Firmware
All versions
KyoceraTaskalfa 4550ci Firmware
All versions
KyoceraTaskalfa 3550ci Firmware
All versions
KyoceraTaskalfa 3050ci Firmware
All versions
KyoceraTaskalfa 255c Firmware
All versions
KyoceraTaskalfa 205c Firmware
All versions
KyoceraTaskalfa 256ci Firmware
All versions
KyoceraTaskalfa 206ci Firmware
All versions
KyoceraEcosys M6526cdn Firmware
All versions
KyoceraEcosys M6526cidn Firmware
All versions

Weakness classification

CWE-290

References