PT-2022-7705 · Kyocera · Kyocera Net View

Aaron Herndon · Published 2022-04-04 · Updated 2026-03-10 · CVE-2022-1026

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kyocera Net View (affected versions not specified)

Description The issue concerns an insufficiently protected address book export function in Kyocera Net View, which unintentionally exposes sensitive user information, including usernames and passwords. This allows a remote attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

BDU:2025-00927

CVE-2022-1026

KYOCERANETVIEW_CVE_2022_1026

Affected Products

Kyocera Net View

References · 16

• 🔥 https://github.com/ac3lives/kyocera-cve-2022-1026 · Exploit
• 🔥 https://rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-1026 · Security Note
• https://kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1026 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00927 · Security Note
• https://t.me/cibsecurity/40107 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/1932799994748166484 · Twitter Post
• https://phrack.me/exploits/2023/09/25/Porting-CVE-2022-1026-to-Nmap-NSE-Script.html · Note
• https://t.me/pentestbacklog/242 · Telegram Post
• https://sploitus.com/exploit?id=44FE72C0-0FFA-5FAD-955A-2F8E8A9728A6 · Note
• https://habr.com/ru/companies/bastion/articles/876946 · Note
• https://kyoceradocumentsolutions.us/en/products/software/KYOCERANETVIEWER.html · Note
• https://fortiguard.fortinet.com/encyclopedia/ips/51379 · Note
• https://kyoceradocumentsolutions.de/de/support/sicherheitsluecken.html · Note