PT-2006-1838 · Kyocera · Kyocera Printers

Published 2006-02-19 · Updated 2017-07-20 · CVE-2006-0789

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kyocera printers (affected versions not specified)

Description The issue concerns certain Kyocera printers that have a default "admin" account with a blank password. This setup allows remote attackers to access an administrative menu via a telnet session.

Recommendations For the affected Kyocera printers, change the default "admin" account password to a strong and unique password to prevent unauthorized access. As a temporary workaround, consider disabling telnet access until a more secure configuration or patch is available. Restrict access to the administrative menu to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-0789

Affected Products

Kyocera Printers

References · 7

• http://secunia.com/advisories/18896 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0789 · Security Note
• http://evader.wordpress.com/2006/02/16/kyocera-printers · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24774 · Note
• http://osvdb.org/23246 · Note
• http://vupen.com/english/advisories/2006/0620 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html · Note