PT-2020-9392

CVE-2019-13203

·

Published

2020-03-13

·

Updated

2020-03-18

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Kyocera printers (such as the ECOSYS M5526cdw 2R7 2000.001.701)
Description: The issue is related to an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application. This vulnerability could allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device.
Recommendations: For the affected Kyocera printers, such as the ECOSYS M5526cdw 2R7 2000.001.701, consider restricting access to the web application until a fix is available. As a temporary workaround, avoid using the arg3 parameter in the affected functionalities to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾