CVE-2023-34259

Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the filesystem, even…

Medium · published November 3, 2023

Patch now

High probability of exploitation

CVSS calls it medium at 4.9. It sits in the 99.1th percentile for exploit probability.

CVSS v3.1
4.9
EPSS
60%
Percentile
99.1
In the wild
Unconfirmed
What it is

Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the filesystem, even files that require root privileges. NOTE: this issue exists because of an incomplete fix for CVE-2020-23575.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.60482 · 99.1th percentile
Published
2023-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the filesystem, even…
    cvelistv5