CVE-2022-1026
HIGH EXPLOITED NUCLEIKyocera Net Viewer < 2s0_1000.005.0012s5_2000.002.505 - Unprotected User Data Exposure via Address Book Export
Title source: llmExploitation Summary
CVE-2022-1026 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 5 public exploits from researchers including ac3lives, h4po0n, flamebarke. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages an unauthenticated SOAP API vulnerability in Kyocera printers to extract cleartext credentials from the address book. It sends crafted SOAP requests to create and retrieve an address book object, exposing sensitive data like SMB, FTP, and domain credentials.
Description
Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.
Exploits (5)
This exploit leverages an unauthenticated SOAP API vulnerability in Kyocera printers to extract cleartext credentials from the address book. It sends crafted SOAP requests to create and retrieve an address book object, exposing sensitive data like SMB, FTP, and domain credentials.
This repository contains a functional PoC for CVE-2022-1026, targeting Kyocera printers with SOAP 1.1 support. It retrieves credentials and address book data by exploiting an information disclosure vulnerability in the SOAP service.
This repository contains a functional exploit for CVE-2022-1026, targeting Kyocera printers to extract sensitive credentials (email, SMB, FTP) from the address book unauthenticated via SOAP API calls. The script supports multi-target scanning, concurrent execution, and configurable output.
This is a Golang-based PoC for CVE-2022-1026, which exploits an address book exposure vulnerability in Kyocera Net View. It checks for vulnerable targets and retrieves sensitive address book data via SOAP requests.
Nuclei Templates (1)
product:"Kyocera Printer Panel"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N