CVE-2023-25954

MEDIUM

KYOCERA Mobile Print < 3.2.0.230119 - Unauthenticated Arbitrary File Download via Intent Handling

Title source: llm
STIX 2.1

Description

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and direct the affected app to download malicious files or apps to the device without notification.

References (5)

Core 5

Scores

CVSS v3 5.5
EPSS 0.0034
EPSS Percentile 25.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-668
Status published
Products (3)
kyocera/mobile_print < 3.2.0.230119
olivetti/mobile_print < 3.2.0.230119
triumph-adler/mobile_print < 3.2.0.230119
Published Apr 13, 2023
Tracked Since Feb 18, 2026