CVE-2008-7109

Published: Aug 28, 2009Modified: Apr 23, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password.

Affected (1)

Products: Kyoceramita: Scanner File Utility

Kyoceramita

1 product

Scanner File Utility

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kyoceramita Scanner File Utility	Version 3.3.0.1

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (12)

http://secunia.com/advisories/31631

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.informit.com/guides/content.aspx?g=security&seqNum=320

Source: cve@mitre.org

ExploitNot Applicable

http://www.securityfocus.com/archive/1/495772/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/30855

Source: cve@mitre.org

Broken LinkExploitThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/44717

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/53004

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://secunia.com/advisories/31631