PT-2009-2578 · Kyocera · Kyocera Mita
CVE-2008-7109
·
Publicado
2009-08-28
·
Atualizado
2025-01-21
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Kyocera Mita (KM) version 3.3.0.1
Description
The issue allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password. This is related to the Scanner File Utility, also known as the listener.
Recommendations
For Kyocera Mita (KM) version 3.3.0.1, consider disabling the Scanner File Utility (listener) until a patch is available to prevent unauthorized file uploads. Restrict access to the client system to minimize the risk of exploitation.
Exploit
Correção
Incorrect Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Kyocera Mita