What’s Vulnerable › Vulnerabilities

CVE-2022-1026: Kyocera Net View Address Book Exposure

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 14.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-04-04 · updated 2026-06-17
• Weakness: CWE-522

Description

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.

Affected products

• Kyocera Multifunction Printer Net Viewer: through 2s0_1000.005.0012s5_2000.002.505

References

• https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html
• https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/
• https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html
• https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/

Get alerted when CVE-2022-1026 or the next vulnerability affects your stack