PT-2006-1838 · Kyocera · Kyocera Printers

Publicado 2006-02-19 · Atualizado 2017-07-20 · CVE-2006-0789

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kyocera printers (affected versions not specified)

Description The issue concerns certain Kyocera printers that have a default "admin" account with a blank password. This setup allows remote attackers to access an administrative menu via a telnet session.

Recommendations For the affected Kyocera printers, change the default "admin" account password to a strong and unique password to prevent unauthorized access. As a temporary workaround, consider disabling telnet access until a more secure configuration or patch is available. Restrict access to the administrative menu to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-0789

Produtos afetados

Kyocera Printers

Referências · 7

• http://evader.wordpress.com/2006/02/16/kyocera-printers · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24774 · Nota
• http://secunia.com/advisories/18896 · Aviso do Fabricante
• http://osvdb.org/23246 · Nota
• http://vupen.com/english/advisories/2006/0620 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0789 · Nota de Segurança