Log in Start free

Vulnerability · Published Apr 13, 2023 · Assigned by jpcert

CVE-2023-25954

Medium 5.5

In plain English

A medium-severity security flaw in KYOCERA Mobile Print, UTAX/TA MobilePrint, and Olivetti Mobile Print from Kyocera Document Solutions, TA Triumph-Adler GmbH, and Olivetti SpA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 72.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and direct the affected app to download malicious files or apps to the device without notification.

Affected products (as reported)

VendorProductVersions
Kyocera Document Solutions, TA Triumph-Adler GmbH, and Olivetti SpA KYOCERA Mobile Print, UTAX/TA MobilePrint, and Olivetti Mobile Print KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier

Weakness: CWE-668 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

References