Vulnerability Details CVE-2022-1026
Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.689
EPSS Ranking 98.5%
CVSS Severity
CVSS v3 Score 8.6
CVSS v2 Score 5.0
References
- https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html
- https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/
- https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html
- https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/
Products affected by CVE-2022-1026
-
cpe:2.3:a:kyocera:net_viewer:-
-
cpe:2.3:a:kyocera:net_viewer:2s0_1000.005.0012s5_2000.002.505