PT-2020-9392
CVE-2019-13203
·
تاريخ النشر
2020-03-13
·
تاريخ التحديث
2020-03-18
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Kyocera printers (such as the ECOSYS M5526cdw 2R7 2000.001.701)
Description:
The issue is related to an integer overflow vulnerability in the
arg3 parameter of several functionalities of the web application. This vulnerability could allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device.Recommendations:
For the affected Kyocera printers, such as the ECOSYS M5526cdw 2R7 2000.001.701, consider restricting access to the web application until a fix is available. As a temporary workaround, avoid using the
arg3 parameter in the affected functionalities to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾