CVE-2023-34259

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Nov 3, 2023
Updated: Nov 13, 2023
CWE ID 22

Summary

CVE-2023-34259 is a newly identified directory traversal vulnerability affecting Kyocera TASKalfa 4053ci printers with firmware versions prior to 2VG_S000.002.561. Hackers can exploit this issue to read arbitrary files on the printer's filesystem, including those that require root privileges. This vulnerability is notable as it stems from an incomplete fix for a previous vulnerability, CVE-2020-23575, which was supposed to have been addressed in a prior update. Printer users are advised to apply the latest firmware patch to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share