Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed by a directory reference such as %2fetc%00index.htm to try to read the /etc directory.

Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed by a directory reference such as %2fetc%00index.htm to try to read the /etc directory.

Command Center RX (CCRX), a web interface for MFPs and printers provided by KYOCERA Document Solutions Inc., contains multiple vulnerabilities listed below. * Path traversal (CWE-22) - CVE-2023-34259 * Path traversal (CWE-22) - CVE-2023-34260 * Observable response discrepancy (CWE-204) - CVE-2023-34261 Stefan Michlits of SEC Consult reported these vulnerabilities to KYOCERA Document Solutions Inc. and coordinated. KYOCERA Document Solutions Inc. and JPCERT/CC published respective advisories in order to notify users of this vulnerability.

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Kyocera Printer ausnutzen, um Informationen offenzulegen oder einen Denial of Service zu verursachen.