CVE-2022-50932CWE-22

Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

High · published January 13, 2026

CVSS v4.0
8.7
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

🚨 A crafty directory traversal vulnerability lurks in the Kyocera Command Center RX ECOSYS M2035dn, allowing attackers to peek into sensitive files without breaking a sweat! ⚡ Think of it like a sneaky mailman who knows just how to bypass security measures and read private letters in a mailbox — all because someone forgot to check for the right permissions! 📬 An attacker could easily access critical files like /etc/passwd and /etc/shadow, potentially revealing usernames and hashed passwords. This could lead to unauthorized access and expose sensitive information, making it a seriously high-stakes game! 🔥

Put simply

Think of it like a sneaky mailman who knows just how to bypass security measures and read private letters in a mailbox — all because someone forgot to check for the right permissions! 📬 This vulnerability allows unauthenticated attackers to manipulate file paths under the /js/ directory, enabling them to exploit null-byte appended traversal techniques and read sensitive files on the server.

What to do

An attacker could easily access critical files like /etc/passwd and /etc/shadow, potentially revealing usernames and hashed passwords. This could lead to unauthorized access and expose sensitive information, making it a seriously high-stakes game! 🔥 To mitigate this risk, patch your Kyocera device to the latest firmware version as soon as possible. Additionally, review and restrict file permissions to prevent unauthorized access to sensitive directories. Regular audits of your system configuration can also help fortify security. 🛡️ You're on the right track! Implement these steps, and you’ll be one step closer to securing your system like a pro! 💪✨

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.04191 · 90.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-01-13T22:51Z
EPSS history
Timeline
  • 13 JAN 22:51Z
    Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)
    cvelistv5