PT-2023-20382 · Google+3 · Android+3
Publicado
2023-04-13
·
Atualizado
2023-04-21
·
CVE-2023-25954
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
KYOCERA Mobile Print versions 3.2.0.230119 and earlier
UTAX/TA MobilePrint versions 3.2.0.230119 and earlier
Olivetti Mobile Print versions 3.2.0.230119 and earlier
Description
The issue is related to improper intent handling. When a malicious app is installed on the victim user's Android device, it may send an intent and direct the affected app to download malicious files or apps to the device without notification.
Recommendations
For KYOCERA Mobile Print versions 3.2.0.230119 and earlier, consider disabling the intent handling feature until a patch is available.
For UTAX/TA MobilePrint versions 3.2.0.230119 and earlier, restrict access to the app's download functionality to minimize the risk of exploitation.
For Olivetti Mobile Print versions 3.2.0.230119 and earlier, avoid using the app to download files or apps from untrusted sources until the issue is resolved.
As a temporary workaround, consider uninstalling the affected apps until a patch is available.
Correção
Exposure of Resource to Wrong Sphere
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Android
Kyocera Mobile Print
Olivetti Mobile Print
Utax/Ta Mobileprint