What’s Vulnerable › Vulnerabilities
CVE-2022-41807
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-12-05 · updated 2026-06-17
- Weakness: CWE-862
Description
Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.
Affected products
- Kyocera Ecosys M2535Dn Firmware: all versions
- Kyocera Ecosys M6526Cdn Firmware: all versions
- Kyocera Ecosys M6526Cidn Firmware: all versions
- Kyocera Ecosys P2135Dn Firmware: all versions
- Kyocera Ecosys P4040Dn Firmware: all versions
- Kyocera Ecosys P6026Cdn Firmware: all versions
- Kyocera Fs-1370Dn Firmware: all versions
- Kyocera Fs-C2026Mfp Firmware: all versions
- Kyocera Fs-C2126Mfp+ Firmware: all versions
- Kyocera Fs-C2126Mfp Firmware: all versions
- Kyocera Fs-C5250Dn Firmware: all versions
- Kyocera Ls-1035Mfp Firmware: all versions
- Kyocera Ls-1135Mfp Firmware: all versions
- Kyocera Ls-2100Dn Firmware: all versions
- Kyocera Ls-3140Mfp+ Firmware: all versions
- Kyocera Ls-3140Mfp Firmware: all versions
- Kyocera Ls-3640Mfp Firmware: all versions
- Kyocera Ls-4200Dn Firmware: all versions
- Kyocera Ls-4300Dn Firmware: all versions
- Kyocera Ls-C8600Dn Firmware: all versions
- Kyocera Ls-C8650Dn Firmware: all versions
- Kyocera Taskalfa 205C Firmware: all versions
- Kyocera Taskalfa 206Ci Firmware: all versions
- Kyocera Taskalfa 255 Firmware: all versions
- Kyocera Taskalfa 255C Firmware: all versions
- Kyocera Taskalfa 256Ci Firmware: all versions
- Kyocera Taskalfa 256I Firmware: all versions
- Kyocera Taskalfa 3050Ci Firmware: all versions
- Kyocera Taskalfa 305 Firmware: all versions
- Kyocera Taskalfa 306I Firmware: all versions
References
- https://jvn.jp/en/jp/JVN46345126/index.html
- https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html
- https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html
- https://jvn.jp/en/jp/JVN46345126/index.html
- https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html
- https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html
Get alerted when CVE-2022-41807 or the next vulnerability affects your stack