PT-2023-24784
CVE-2023-34261
·
تاريخ النشر
2023-11-02
·
تاريخ التحديث
2024-09-05
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Kyocera TASKalfa 4053ci printers through 2VG S000.002.561
Description
The issue allows identification of valid user accounts via username enumeration. This occurs because the system returns a "nicht einloggen" error rather than a "falsch" error when an attempt is made to access an account.
Recommendations
For Kyocera TASKalfa 4053ci printers through 2VG S000.002.561, consider restricting access to the login functionality to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾