The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Scanner_file_utility | Kyoceramita | 3.3.0.1 (including) | 3.3.0.1 (including) |
References
- http://secunia.com/advisories/31631
- http://www.informit.com/guides/content.aspx?g=security\u0026seqNum=321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44719
- http://secunia.com/advisories/31631
- http://www.informit.com/guides/content.aspx?g=security\u0026seqNum=321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44719