Kyocera Command Center RX vulnerabilities

Kyocera Command Center RX on ECOSYS M2035dn devices contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg to access critical files such as /etc/passwd and /etc/shadow.

A vulnerability in Kyocera Command Center RX allows unauthorized export of the entire address book and bypass of data encryption, leading to disclosure of passwords and other sensitive information. The flaw affects multiple Kyocera TASKalfa printer models.

A vulnerability in the user interface of Kyocera Command Center RX EXOSYS M5521cdn allows a remote attacker to obtain sensitive information by inspecting packets sent by the user.