CVE-2019-13202

Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the okhtmlfile and failhtmlfile parameters of several functionalities of the web application that would allow an unauthenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-03-13

Last modified

2024-08-04

Weaknesses

CWE-120

Affected products

• Ecosys M5526cdw Firmware (Kyocera)

References

• https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/