{"id":"CVE-2022-41807","aliases":["EUVD-2022-44975","GHSA-26rq-fvc6-cmqf"],"status":"published","title":"Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which...","description":"Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00431,"percentile":0.3762,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2022-12-05T00:00:00Z","modified":"2026-06-17T05:03:52Z","products":[{"vendor":"kyocera","product":"ecosys_m2535dn_firmware"},{"vendor":"kyocera","product":"ecosys_m6526cdn_firmware"},{"vendor":"kyocera","product":"ecosys_m6526cidn_firmware"},{"vendor":"kyocera","product":"ecosys_p2135dn_firmware"},{"vendor":"kyocera","product":"ecosys_p4040dn_firmware"},{"vendor":"kyocera","product":"ecosys_p6026cdn_firmware"},{"vendor":"kyocera","product":"fs-1370dn_firmware"},{"vendor":"kyocera","product":"fs-c2026mfp_firmware"},{"vendor":"kyocera","product":"fs-c2126mfp\\+_firmware"},{"vendor":"kyocera","product":"fs-c2126mfp_firmware"},{"vendor":"kyocera","product":"fs-c5250dn_firmware"},{"vendor":"kyocera","product":"ls-1035mfp_firmware"},{"vendor":"kyocera","product":"ls-1135mfp_firmware"},{"vendor":"kyocera","product":"ls-2100dn_firmware"},{"vendor":"kyocera","product":"ls-3140mfp\\+_firmware"},{"vendor":"kyocera","product":"ls-3140mfp_firmware"},{"vendor":"kyocera","product":"ls-3640mfp_firmware"},{"vendor":"kyocera","product":"ls-4200dn_firmware"},{"vendor":"kyocera","product":"ls-4300dn_firmware"},{"vendor":"kyocera","product":"ls-c8600dn_firmware"},{"vendor":"kyocera","product":"ls-c8650dn_firmware"},{"vendor":"kyocera","product":"taskalfa_205c_firmware"},{"vendor":"kyocera","product":"taskalfa_206ci_firmware"},{"vendor":"kyocera","product":"taskalfa_255_firmware"},{"vendor":"kyocera","product":"taskalfa_255c_firmware"},{"vendor":"kyocera","product":"taskalfa_256ci_firmware"},{"vendor":"kyocera","product":"taskalfa_256i_firmware"},{"vendor":"kyocera","product":"taskalfa_3050ci_firmware"},{"vendor":"kyocera","product":"taskalfa_305_firmware"},{"vendor":"kyocera","product":"taskalfa_306i_firmware"},{"vendor":"kyocera","product":"taskalfa_3500i_firmware"},{"vendor":"kyocera","product":"taskalfa_3550ci_firmware"},{"vendor":"kyocera","product":"taskalfa_4500i_firmware"},{"vendor":"kyocera","product":"taskalfa_4550ci_firmware"},{"vendor":"kyocera","product":"taskalfa_5500i_firmware"},{"vendor":"kyocera","product":"taskalfa_5550ci_firmware"},{"vendor":"kyocera","product":"taskalfa_6500i_firmware"},{"vendor":"kyocera","product":"taskalfa_6550ci_firmware"},{"vendor":"kyocera","product":"taskalfa_7550ci_firmware"},{"vendor":"kyocera","product":"taskalfa_8000i_firmware"},{"vendor":"kyocera document solutions inc.","product":"kyocera document solutions mfps and printers"}],"references":[{"url":"https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.html","tags":["x_transferred","Third Party Advisory"]},{"url":"https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.html","tags":["x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://jvn.jp/en/jp/JVN46345126/index.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41807"},{"url":"https://github.com/advisories/GHSA-26rq-fvc6-cmqf"}],"sources":{"cve":[{"id":"CVE-2022-41807","description":"Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.","status":"published","published":"2022-12-05T00:00:00Z","modified":"2025-04-24T14:29:43.153Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:34:28.038197Z"}],"euvd":[{"id":"EUVD-2022-44975","description":"Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.","status":"published","published":"2022-12-05T00:00:00Z","modified":"2025-04-24T14:29:43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:04.724433Z"}],"ghsa":[{"id":"GHSA-26rq-fvc6-cmqf","title":"Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which...","description":"Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.","status":"published","published":"2022-12-05T06:30:22Z","modified":"2023-01-31T05:02:40Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:48:18.936909Z"}],"nvd":[{"id":"CVE-2022-41807","description":"Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.","status":"published","published":"2022-12-05T04:15:10.02Z","modified":"2026-06-17T05:03:52.327Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:07:33.239526Z"}]}}