PT-2009-2578 · Kyocera · Kyocera Mita

CVE-2008-7109

·

Publicado

2009-08-28

·

Atualizado

2025-01-21

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Kyocera Mita (KM) version 3.3.0.1
Description The issue allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password. This is related to the Scanner File Utility, also known as the listener.
Recommendations For Kyocera Mita (KM) version 3.3.0.1, consider disabling the Scanner File Utility (listener) until a patch is available to prevent unauthorized file uploads. Restrict access to the client system to minimize the risk of exploitation.

Exploit

Correção

Incorrect Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2008-7109

Produtos afetados

Kyocera Mita