CVE-2022-25343

Name of the Vulnerable Software and Affected Versions Kyocera d-COLOR MF3555 version 2XD S000.002.271

Description The Web Application is affected by a Denial of Service issue. An unauthenticated attacker can send POST requests to the "/download/set.cgi" page by manipulating the failhtmfile variable, causing interruption of the service provided by the Web Application.

Recommendations For version 2XD S000.002.271, as a temporary workaround, consider restricting access to the "/download/set.cgi" page to minimize the risk of exploitation. Avoid using the failhtmfile variable in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.