PT-2006-1837 · Kyocera · Kyocera 3830

Publicado 2006-02-19 · Atualizado 2017-07-20 · CVE-2006-0788

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Kyocera 3830 (aka FS-3830N) printers (affected versions not specified)

Description The issue allows remote attackers to read and alter configuration settings. This can be achieved via strings that begin with "!R!SIOP0". Attackers can exploit this using a connection to TCP port 9100 or the UNIX lp command.

Recommendations For Kyocera 3830 (aka FS-3830N) printers, restrict access to TCP port 9100 to minimize the risk of exploitation. As a temporary workaround, consider restricting the use of the UNIX lp command until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0788

Produtos afetados

Kyocera 3830

Referências · 8

• http://evader.wordpress.com/2006/02/16/kyocera-printers · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0788 · Nota de Segurança
• http://securityfocus.com/bid/16685 · Nota
• http://secunia.com/advisories/18896 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0620 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html · Nota
• http://osvdb.org/23245 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24772 · Nota