NetSight
IP …
medium6.5

CVE-2022-41807

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product se…

Impact

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.

Affected products

VendorProductAffected versions
KyoceraTaskalfa 7550ci Firmware
All versions
KyoceraTaskalfa 6550ci Firmware
All versions
KyoceraTaskalfa 5550ci Firmware
All versions
KyoceraTaskalfa 4550ci Firmware
All versions
KyoceraTaskalfa 3550ci Firmware
All versions
KyoceraTaskalfa 3050ci Firmware
All versions
KyoceraTaskalfa 255c Firmware
All versions
KyoceraTaskalfa 205c Firmware
All versions
KyoceraTaskalfa 256ci Firmware
All versions
KyoceraTaskalfa 206ci Firmware
All versions
KyoceraEcosys M6526cdn Firmware
All versions
KyoceraEcosys M6526cidn Firmware
All versions

Weakness classification

CWE-862

References