CVE-2023-34260

high · 7.5

Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed by a directory reference such as %2fetc%00index.htm to try to read the /etc directory.

7.5

CVSS

73.4%

EPSS (exploit prob.)

99th

EPSS percentile

2023-11-03

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
kyocera	d-copia253mf_plus_firmware	<= 2vg_s000.002.561
kyocera	d-copia253mf_plus	all versions

Check a specific version with /api/v1/cve/match.

References

https://sec-consult.com/vulnerability-lab/
https://seclists.org/fulldisclosure/2023/Jul/15
https://sec-consult.com/vulnerability-lab/
https://seclists.org/fulldisclosure/2023/Jul/15

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-34260