CVE-2008-7109
- State
- Published
- Severity
- 9.8 Critical
- Published
- Aug 28, 2009
- Updated
- Jan 21, 2025
- Reserved
- Aug 28, 2009
Description
The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- kyocera-scanner-program-file-upload(53004)vdb-entry
- 20080826 White Wolf Labs #080826-1: Kyocera Mita Scanner File Utility (Multiple)mailing-list
- kmscanner-requests-file-upload(44717)vdb-entry
- http://www.informit.com/guides/content.aspx?g=security&seqNum=320
- 30855vdb-entry
- 31631third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.