CVE-2023-49367
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability in the user interface of Kyocera Command Center RX EXOSYS M5521cdn allows a remote attacker to obtain sensitive information by inspecting packets sent by the user.
Risk Assessment
The risk involves potential interception of confidential data such as passwords or configurations, which could lead to network and device security breaches.
Recommendation
It is recommended to immediately update the Command Center RX software to the latest version and enforce encryption of network traffic (e.g., HTTPS) for the management interface.
Other vulnerabilities in Kyocera Command Center RX
See all- CVE-2022-50932High
Kyocera Command Center RX on ECOSYS M2035dn devices contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg to access critical files such as /etc/passwd and /etc/shadow.
- CVE-2025-63579High
A vulnerability in Kyocera Command Center RX allows unauthorized export of the entire address book and bypass of data encryption, leading to disclosure of passwords and other sensitive information. The flaw affects multiple Kyocera TASKalfa printer models.
Original NVD description (English source)
An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent packages by user.