CVE-2022-41807

Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.

• CWE-862
• CWE-862

• https://jvn.jp/en/jp/JVN46345126/index.htmlVendor Advisory
• https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.htmlMitigation, Vendor Advisory
• https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.htmlThird Party Advisory
• https://jvn.jp/en/jp/JVN46345126/index.htmlVendor Advisory
• https://www.kyoceradocumentsolutions.co.jp/support/information/info_20221101.htmlMitigation, Vendor Advisory
• https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-11-01.htmlThird Party Advisory

Published

Dec 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41801Uncontrolled resource consumption in the Intel(R) Connect M …5.5
• CVE-2022-41802Kernel subsystem within OpenHarmony-v3.1.4 and prior version…3.3
• CVE-2022-41803Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-41804Unauthorized error injection in Intel(R) SGX or Intel(R) TDX…6.7
• CVE-2022-41805Cross-Site Request Forgery (CSRF) vulnerability in Booster f…4.3
• CVE-2022-41806In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.…7.5
• CVE-2022-41808Improper buffer restriction in software for the Intel QAT Dr…5.5
• CVE-2022-41809Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-4181Use after free in Forms in Google Chrome prior to 108.0.5359…8.8
• CVE-2022-41810Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-41811Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-41812Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…