KYOCERA Document Solutions Inc. Kyocera Document Solutions MFPs and printers

• CVE-2022-41798 Medium 6.5 Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to log in to the product by spoofing a user with 0.5%
• CVE-2022-41830 Medium 4.8 Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script. Affected p 0.8%
• CVE-2022-41807 Medium 6.5 Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending 0.4%