Kyocera D-Copia253Mf Plus Firmware vulnerabilities

CVE-2023-34259 [MEDIUM] CVE-2023-34259: Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the filesystem, even files that require root privileges. NOTE: this issue exists because of an incomplete fix for CVE-2020-23575.

CVE-2023-34260 [HIGH] CWE-22 CVE-2023-34260: Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed by a directory reference such as %2fetc%00index.htm to try to read the /etc directory.

CVE-2023-34261 [MEDIUM] CWE-200 CVE-2023-34261: Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow identification of valid user account Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow identification of valid user accounts via username enumeration because they lead to a "nicht einloggen" error rather than a falsch error.