Medium WID-SEC-2026-0915 15 CVEs

Kyocera Drucker: Mehrere Schwachstellen

Published Mar 30, 2026 · Updated Jun 1, 2026 · Revision 4 · de-DE

Vendor: KYOCERA Product: Printer

Summary

Ein Angreifer aus dem lokalen Netzwerk kann mehrere Schwachstellen in verschiedenen Modellen der Kyocera ECOSYS und TASKalfa Produktfamilien ausnutzen, um Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.

Product

Kyocera ist ein Hersteller u.a. von Druckern.

Vulnerabilities 15

Critical 9.8

CVE-2016-1000031 EPSS 33%

Improper Access Control in commons-fileupload

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

tomcat8 tomcat7 tomcat6 commons-fileupload:commons-fileupload Debian Ubuntu Maven

Oct 25, 2016
Critical 9.8

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

openjpeg2 fltk libpng1.6 libpng1.6 Debian Ubuntu Azure Linux

Jul 10, 2019
Critical 9.8

CVE-2022-37434 Public exploit EPSS 19%

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

openjpeg2 rsync fltk gdal Debian Ubuntu Azure Linux Alpine Wolfi

Aug 5, 2022
High 8.8

CVE-2016-9842

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact …

openjpeg2 rsync rsync fltk Debian Ubuntu Azure Linux Alpine

May 23, 2017
High 7.8

CVE-2022-40304

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, …

libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Nov 23, 2022
High 7.5

CVE-2014-0050 Public exploit EPSS 83%

Commons FileUpload Denial of service vulnerability

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a…

org.apache.tomcat:tomcat commons-fileupload:commons-fileupload libcommons-fileupload-java Debian Maven

Mar 28, 2014
High 7.5

CVE-2016-3092 EPSS 37%

High severity vulnerability that affects commons-fileupload:commons-fileupload

The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consu…

tomcat8 tomcat7 tomcat6 commons-fileupload:commons-fileupload Debian Ubuntu Maven

Jul 4, 2016
High 7.5

CVE-2022-40303 EPSS 41%

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE pa…

libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Nov 22, 2022
High 7.5

CVE-2023-24998 Public exploit EPSS 49%

Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts

Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new c…

Apache Software Foundation Apache Tomcat Apache Commons FileUpload tomcat9 Debian Ubuntu Maven

Feb 20, 2023
High 7.4

CVE-2024-20952

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 16, 2024
Medium 6.8

CVE-2013-0248

Incorrect Default Permissions in Apache Commons FileUpload

The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload 1.0 through 1.2.2 uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

commons-fileupload:commons-fileupload libcommons-fileupload-java Debian Maven

Mar 15, 2013
Medium 6.5

CVE-2023-29469

An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictCom…

qt5-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Apr 24, 2023
Unscored —

CVE-2015-8126 EPSS 10%

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2…

fltk libpng Ubuntu Azure Linux

Nov 13, 2015
Unscored —

CVE-2015-8472

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x befor…

fltk libpng1.6 libpng Debian Ubuntu Azure Linux

Jan 21, 2016
Unscored —

CVE-2016-3751

Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x befor…

android Ubuntu

Jul 11, 2016

Revision history

2026-06-01 #4
Weitere Updates von Kyocera verfügbar.
2026-04-15 #3
Ergänzung von Kyocera bereitgestellter Informationen
2026-04-09 #2
Anpassung CVSS
2026-03-30 #1
Initiale Fassung

References

Kyocera-Sicherheitshinweise
https://www.kyoceradocumentsolutions.de/de/support/sicherheitsluecken.html
National Vulnerability Database CVE-2013-0248
https://nvd.nist.gov/vuln/detail/CVE-2013-0248
National Vulnerability Database CVE-2014-0050
https://nvd.nist.gov/vuln/detail/CVE-2014-0050
National Vulnerability Database CVE-2015-8126
https://nvd.nist.gov/vuln/detail/CVE-2015-8126
National Vulnerability Database CVE-2015-8472
https://nvd.nist.gov/vuln/detail/CVE-2015-8472
National Vulnerability Database CVE-2016-1000031
https://nvd.nist.gov/vuln/detail/CVE-2016-1000031
National Vulnerability Database CVE-2016-3092
https://nvd.nist.gov/vuln/detail/CVE-2016-3092
National Vulnerability Database CVE-2016-3751
https://nvd.nist.gov/vuln/detail/CVE-2016-3751
National Vulnerability Database CVE-2016-9842
https://nvd.nist.gov/vuln/detail/CVE-2016-9842
National Vulnerability Database CVE-2017-12652
https://nvd.nist.gov/vuln/detail/CVE-2017-12652
National Vulnerability Database CVE-2022-37434
https://nvd.nist.gov/vuln/detail/CVE-2022-37434
National Vulnerability Database CVE-2022-40303
https://nvd.nist.gov/vuln/detail/CVE-2022-40303
National Vulnerability Database CVE-2022-40304
https://nvd.nist.gov/vuln/detail/CVE-2022-40304
National Vulnerability Database CVE-2023-24998
https://nvd.nist.gov/vuln/detail/CVE-2023-24998
National Vulnerability Database CVE-2023-29469
https://nvd.nist.gov/vuln/detail/CVE-2023-29469
National Vulnerability Database CVE-2024-20952
https://nvd.nist.gov/vuln/detail/CVE-2024-20952
Kyocera-Sicherheitshinweise - Update Juni 2026
https://www.kyoceradocumentsolutions.de/de/support/sicherheitsluecken.html