Medium severity6.1NVD Advisory· Published Nov 17, 2020· Updated Jun 17, 2026
CVE-2020-25890
CVE-2020-25890
Description
The web application of Kyocera printer (ECOSYS M2640IDW) is affected by Stored XSS vulnerability, discovered in the addition a new contact in "Machine Address Book". Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions
Affected products
3- cpe:2.3:o:kyocera:ecosys_m2640idw_firmware:-:*:*:*:*:*:*:*
- Kyocera/ECOSYS M2640IDWdescription
Patches
Vulnerability mechanics
References
1- vitor-santos.medium.com/xss-in-kyocera-printer-ecosys-m2640idw-cf6d3bc525e3nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.