PT-2020-9392

CVE-2019-13203

·

تاريخ النشر

2020-03-13

·

تاريخ التحديث

2020-03-18

الوصف من

CVSS 2.0
9.0
عالية
المقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Kyocera printers (such as the ECOSYS M5526cdw 2R7 2000.001.701)
Description: The issue is related to an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application. This vulnerability could allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device.
Recommendations: For the affected Kyocera printers, such as the ECOSYS M5526cdw 2R7 2000.001.701, consider restricting access to the web application until a fix is available. As a temporary workaround, avoid using the arg3 parameter in the affected functionalities to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾