PT-2009-2578 · Kyocera · Kyocera Mita

Published 2009-08-28 · Updated 2025-01-21 · CVE-2008-7109

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kyocera Mita (KM) version 3.3.0.1

Description The issue allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password. This is related to the Scanner File Utility, also known as the listener.

Recommendations For Kyocera Mita (KM) version 3.3.0.1, consider disabling the Scanner File Utility (listener) until a patch is available to prevent unauthorized file uploads. Restrict access to the client system to minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2008-7109

Affected Products

Kyocera Mita

References · 9

• 🔥 http://securityfocus.com/bid/30855 · Exploit
• 🔥 http://informit.com/guides/content.aspx?g=security&seqNum=320 · Exploit
• http://secunia.com/advisories/31631 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-7109 · Security Note
• https://t.me/cvenotify/68148 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53004 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44717 · Note
• http://securityfocus.com/archive/1/495772/100/0/threaded · Note
• https://t.me/cvenotify/108038 · Telegram Post