CVE-2022-1026
HIGH 8.6EPSS 14.7%
Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.
- CVSS v3.1
- 8.6 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - CVSS v3.1
- 8.6 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 14.73% chance of exploitation in the next 30 days, 96th percentile
- Nuclei
- high · CWE-522
- Published
- 2022-04-04
- Updated
- 2024-09-16
Proof-of-concept exploits (7)
- https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-e…
- ac3lives/kyocera-cve-2022-102626★ · 2023-03-15
- flamebarke/nmap-printer-nse-scripts2★ · 2023-07-15
- r0lh/kygocera0★ · 2024-06-13
- D4RKMATT3R/KyoceraCredsDump
- h4po0n/kyocera-cve-2022-1026_SOAP1.1
- ushst/getKyoceraCreds