CVE-2023-34259

medium · 4.9

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the filesystem, even files that require root privileges. NOTE: this issue exists because of an incomplete fix for CVE-2020-23575.

4.9

CVSS

60.5%

EPSS (exploit prob.)

99th

EPSS percentile

2023-11-03

Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
kyocera	d-copia253mf_plus_firmware	<= 2vg_s000.002.561
kyocera	d-copia253mf_plus	all versions

Check a specific version with /api/v1/cve/match.

References

https://sec-consult.com/vulnerability-lab/
https://seclists.org/fulldisclosure/2023/Jul/15
https://sec-consult.com/vulnerability-lab/
https://seclists.org/fulldisclosure/2023/Jul/15

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-34259