PT-2023-24781 · Kyocera · Kyocera Taskalfa 4053Ci

Gorazd Jank + 1 · Published 2023-11-02 · Updated 2026-03-10 · CVE-2023-34259

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kyocera TASKalfa 4053ci printers versions 2VG S000.002.561 and earlier

Description The issue allows directory traversal to read arbitrary files on the filesystem, even files that require root privileges, via the /wlmdeu%2f%2e%2e%2f%2e%2e endpoint. This is due to an incomplete fix for a previous issue.

Recommendations For versions 2VG S000.002.561 and earlier, as a temporary workaround, consider restricting access to the /wlmdeu%2f%2e%2e%2f%2e%2e endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-34259

Affected Products

Kyocera Taskalfa 4053Ci

References · 8

• 🔥 https://seclists.org/fulldisclosure/2023/Jul/15 · Exploit
• https://osv.dev/vulnerability/CVE-2023-34259 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34259 · Security Note
• https://twitter.com/CVEnew/status/1720287971117502779 · Twitter Post
• https://sec-consult.com/vulnerability-lab · Note
• https://t.me/cvenotify/93554 · Telegram Post
• https://t.me/cibsecurity/73506 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1720316442862653586 · Twitter Post