CVE-2019-13205 - CVE House
Back to Database
Status published High CVE-2019-13205

All configuration parameters of certain Kyocera printers (such as the...

Vulnerability Description

All configuration parameters of certain Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files that contained the configuration parameters were accessible. These files contained sensitive information, such as users, community strings, and other passwords configured in the printer.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13205

Credits & Attribution

No credits recorded in the NVD database.

References

More from kyocera

View All →
CVE-2020-25890
The web application of Kyocera printer (ECOSYS M2640IDW) is affected...
Medium 6.1
CVE-2020-23575
A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus....
High 7.5
CVE-2019-6452
Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers...
High 8.8
CVE-2019-13206
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were...
High 8.8
CVE-2019-13204
Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were...
Critical 9.8

Affected Vendor

Affected Software

ecosys m5526cdw firmware
Vulnerable Versions:
2r7_2000.001.701

Timeline

Official Publish: March 13th, 2020
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.