PT-2020-9384 · Kyocera · Kyocera Printers

Published 2020-03-13 · Updated 2020-03-19 · CVE-2019-13195

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Kyocera printers (affected versions not specified)

Description: The web application of some Kyocera printers was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders existed within the file system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-13195

Affected Products

Kyocera Printers

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-13195 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13195 · Vendor Advisory
• https://t.me/cvenotify/1660 · Telegram Post
• https://nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers · Note