CVE-2022-41807
Description
Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kyocera taskalfa_7550ci_firmware | No range specified | — |
| kyocera taskalfa_6550ci_firmware | No range specified | — |
| kyocera taskalfa_5550ci_firmware | No range specified | — |
| kyocera taskalfa_4550ci_firmware | No range specified | — |
| kyocera taskalfa_3550ci_firmware | No range specified | — |
| kyocera taskalfa_3050ci_firmware | No range specified | — |
| kyocera taskalfa_255c_firmware | No range specified | — |
| kyocera taskalfa_205c_firmware | No range specified | — |
| kyocera taskalfa_256ci_firmware | No range specified | — |
| kyocera taskalfa_206ci_firmware | No range specified | — |
| kyocera ecosys_m6526cdn_firmware | No range specified | — |
| kyocera ecosys_m6526cidn_firmware | No range specified | — |
| kyocera fs-c2126mfp_firmware | No range specified | — |
| kyocera fs-c2126mfp\+_firmware | No range specified | — |
| kyocera fs-c2026mfp_firmware | No range specified | — |
| kyocera taskalfa_8000i_firmware | No range specified | — |
| kyocera taskalfa_6500i_firmware | No range specified | — |
| kyocera taskalfa_5500i_firmware | No range specified | — |
| kyocera taskalfa_4500i_firmware | No range specified | — |
| kyocera taskalfa_3500i_firmware | No range specified | — |
| kyocera taskalfa_305_firmware | No range specified | — |
| kyocera taskalfa_255_firmware | No range specified | — |
| kyocera taskalfa_306i_firmware | No range specified | — |
| kyocera taskalfa_256i_firmware | No range specified | — |
| kyocera ls-3140mfp_firmware | No range specified | — |
| kyocera ls-3140mfp\+_firmware | No range specified | — |
| kyocera ls-3640mfp_firmware | No range specified | — |
| kyocera ecosys_m2535dn_firmware | No range specified | — |
| kyocera ls-1135mfp_firmware | No range specified | — |
| kyocera ls-1035mfp_firmware | No range specified | — |
| kyocera ls-c8650dn_firmware | No range specified | — |
| kyocera ls-c8600dn_firmware | No range specified | — |
| kyocera ecosys_p6026cdn_firmware | No range specified | — |
| kyocera fs-c5250dn_firmware | No range specified | — |
| kyocera ls-4300dn_firmware | No range specified | — |
| kyocera ls-4200dn_firmware | No range specified | — |
| kyocera ls-2100dn_firmware | No range specified | — |
| kyocera ecosys_p4040dn_firmware | No range specified | — |
| kyocera ecosys_p2135dn_firmware | No range specified | — |
| kyocera fs-1370dn_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.