Vulnerabilities in ECOSYS M5526cdw

Potential Security Impact:

XSS, CSRF, Path Traversal, Broken Access Control, Potential Buffer Overflow

VULNERABILITY SUMMARY:

Potential security vulnerabilities have been identified with KYOCERA ECOSYS M5526cdw printer. The vulnerabilities could be exploited to perform Cross-site scripting (XSS), Cross-site request forgery (CSRF), Path Traversal, Broken Access Control, or Buffer overflow attacks.

Reference Number:

CVE-2019-13195, CVE-2019-13196, CVE-2019-13197, CVE-2019-13198, CVE-2019-13199, CVE-2019-13200, CVE-2019-13201, CVE-2019-13202, CVE-2019-13203, CVE-2019-13204, CVE-2019-13205, CVE-2019-13206

Acknowledgement:

KYOCERA Document Solutions Inc. acknowledges the NCC Group for reporting these vulnerabilities as it helps our company in optimizing product security.

Affected Product and Updated Software:

Please refer to the software version below, which resolves these vulnerabilities. Please contact your support representative for information about installation of the updated software.

• Product name:  ECOSYS M5526cdw
• Updated Software Version:  2R7_2000.002.301