CVE-2023-50916

Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a UNC path via the GUI is rejected due to the use of a \ (backslash) character, which is supposed to be disallowed in a pathname. Intercepting and modifying this request via a proxy, or sending the request directly to the application endpoint, allows UNC paths to be set for the backup location. Once such a location is set, Kyocera Device Manager attempts to confirm access and will try to authenticate to the UNC path; depending on the configuration of the environment, this may authenticate to the UNC with Windows NTLM hashes. This could allow NTLM credential relaying or cracking attacks.

• CWE-22
• CWE-22

• https://www.kyoceradocumentsolutions.us/en/about-us/pr-and-award-certifications/press/kyocera-device-manager-cve-2023-50196-vulnerability-solution-update.htmlVendor Advisory
• https://www.trustwave.com/en-us/resources/security-resources/security-advisories/Third Party Advisory
• https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-001_kyocera-v2.txtExploit, Third Party Advisory
• https://www.kyoceradocumentsolutions.us/en/about-us/pr-and-award-certifications/press/kyocera-device-manager-cve-2023-50196-vulnerability-solution-update.htmlVendor Advisory
• https://www.trustwave.com/en-us/resources/security-resources/security-advisories/Third Party Advisory
• https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-001_kyocera-v2.txtExploit, Third Party Advisory

Published

Jan 10, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-50904Missing Authorization vulnerability in Ays Pro Poll Maker po…5.3
• CVE-2023-50905Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-5091Use After Free vulnerability in Arm Ltd Valhall GPU Kernel D…5.5
• CVE-2023-50913Oxide control plane software before 5 allows SSRF.9.1
• CVE-2023-50914A Privilege Escalation issue in the inter-process communicat…6.7
• CVE-2023-50915An issue exists in GalaxyClientService.exe in GOG Galaxy (Be…6.5
• CVE-2023-50917MajorDoMo (aka Major Domestic Module) before 0662e5e allows …9.8
• CVE-2023-50918app/Controller/AuditLogsController.php in MISP before 2.4.18…9.8
• CVE-2023-50919An issue was discovered on GL.iNet devices before version 4.…9.8
• CVE-2023-5092Rejected reason: This CVE id was assigned to an issue which …
• CVE-2023-50920An issue was discovered on GL.iNet devices before version 4.…5.5
• CVE-2023-50921An issue was discovered on GL.iNet devices through 4.5.0. At…9.8