CVE-2008-7109

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/31631Broken Link, Vendor Advisory
http://www.informit.com/guides/content.aspx?g=security&seqNum=320Exploit, Not Applicable
http://www.securityfocus.com/archive/1/495772/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/30855Broken Link, Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44717Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/53004Third Party Advisory, VDB Entry
http://secunia.com/advisories/31631Broken Link, Vendor Advisory
http://www.informit.com/guides/content.aspx?g=security&seqNum=320Exploit, Not Applicable
http://www.securityfocus.com/archive/1/495772/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/30855Broken Link, Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44717Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/53004Third Party Advisory, VDB Entry

Timeline

Published: Aug 28, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2008