Lucene search

MitreCVE-2019-13201

HistoryMar 13, 2020 - 7:15 p.m.

CVE-2019-13201

2020-03-1319:15:16

CWE-120

mitre

web.nvd.nist.gov

kyocera

printer

ecosys m5526cdw

buffer overflow

vulnerability

lpd service

dos

arbitrary code

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

72.5%

JSON

Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the LPD service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) in the LPD service and potentially execute arbitrary code on the device.

Affected configurations

Nvd

Node

kyoceraecosys_m5526cdw_firmwareMatch2r7_2000.001.701

AND

kyoceraecosys_m5526cdwMatch-

VendorProductVersionCPE
kyoceraecosys_m5526cdw_firmware2r7_2000.001.701cpe:2.3:o:kyocera:ecosys_m5526cdw_firmware:2r7_2000.001.701:*:*:*:*:*:*:*
kyoceraecosys_m5526cdw-cpe:2.3:h:kyocera:ecosys_m5526cdw:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kyocera	ecosys_m5526cdw_firmware	2r7_2000.001.701	cpe:2.3:o:kyocera:ecosys_m5526cdw_firmware:2r7_2000.001.701:::::::*
kyocera	ecosys_m5526cdw	-	cpe:2.3:h:kyocera:ecosys_m5526cdw:-:::::::*

References

www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

72.5%

JSON

Related for CVE-2019-13201