CVE-2008-7109 The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does no...
CriticalCVSS 9.8
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kyoceramita scanner file utility | = 3.3.0.1 | No fix listed |
References
- 31631 broken-link third-party-advisory vendor-advisory
- www.informit.com exploit not-applicable
- 20080826 White Wolf Labs #080826-1: Kyocera Mita Scanner File Utility (Multiple) broken-link mailing-list third-party-advisory vdb-entry
- 30855 broken-link exploit third-party-advisory vdb-entry
- kmscanner-requests-file-upload(44717) third-party-advisory vdb-entry
- kyocera-scanner-program-file-upload(53004) third-party-advisory vdb-entry