CVE-2022-1026

Published: Apr 4, 2022Modified: Nov 21, 2024

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 4.0

Source: NVD

Description

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.

Affected (1)

Products: Kyocera: Net Viewer

Kyocera

1 product

Net Viewer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kyocera Net Viewer	Up to 2s0_1000.005.0012s5_2000.002.505

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (4)

https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html

Source: cve@rapid7.com

Vendor Advisory

https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/

Source: cve@rapid7.com

ExploitThird Party Advisory

https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.