CVE-2023-34259

Name of the Vulnerable Software and Affected Versions Kyocera TASKalfa 4053ci printers versions 2VG S000.002.561 and earlier

Description The issue allows directory traversal to read arbitrary files on the filesystem, even files that require root privileges, via the /wlmdeu%2f%2e%2e%2f%2e%2e endpoint. This is due to an incomplete fix for a previous issue.

Recommendations For versions 2VG S000.002.561 and earlier, as a temporary workaround, consider restricting access to the /wlmdeu%2f%2e%2e%2f%2e%2e endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.