PT-2006-1837 · Kyocera · Kyocera 3830

Published 2006-02-19 · Updated 2017-07-20 · CVE-2006-0788

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Kyocera 3830 (aka FS-3830N) printers (affected versions not specified)

Description The issue allows remote attackers to read and alter configuration settings. This can be achieved via strings that begin with "!R!SIOP0". Attackers can exploit this using a connection to TCP port 9100 or the UNIX lp command.

Recommendations For Kyocera 3830 (aka FS-3830N) printers, restrict access to TCP port 9100 to minimize the risk of exploitation. As a temporary workaround, consider restricting the use of the UNIX lp command until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0788

Affected Products

Kyocera 3830

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-0788 · Security Note
• http://secunia.com/advisories/18896 · Vendor Advisory
• http://evader.wordpress.com/2006/02/16/kyocera-printers · Note
• http://securityfocus.com/bid/16685 · Note
• http://vupen.com/english/advisories/2006/0620 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html · Note
• http://osvdb.org/23245 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24772 · Note