{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/kyocera/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:kyocera:command_center_rx:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2023-49367"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Command Center RX (EXOSYS M5521cdn)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Kyocera"],"content_html":"\u003cp\u003eKyocera Command Center RX, specifically in the EXOSYS M5521cdn model, is vulnerable to sensitive data exposure (CVE-2023-49367). When a user performs an address book connectivity test for SMB or FTP protocols via the web management interface, the device transmits the configured credentials in plaintext. These credentials can be intercepted by an attacker positioned to monitor network traffic between the printer and the target file server.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in the disclosure of plaintext administrative or service account credentials for SMB/FTP infrastructure, facilitating lateral movement or further unauthorized access to file shares.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all Kyocera EXOSYS M5521cdn devices accessible via the internal network.\u003c/li\u003e\n\u003cli\u003eRestrict network access to the Command Center RX web management interface to trusted administrative IP addresses only.\u003c/li\u003e\n\u003cli\u003eDisable unnecessary SMB/FTP address book functions if not required for standard operations.\u003c/li\u003e\n\u003cli\u003eMonitor for unauthorized capture of SMB/FTP traffic originating from printer IP addresses.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T21:28:08Z","date_published":"2026-10-28T21:28:08Z","id":"https://feed.craftedsignal.io/briefs/2026-10-kyocera-cve-2023-49367/","summary":"CVE-2023-49367 allows attackers to intercept plaintext SMB and FTP credentials transmitted during address book connectivity test requests in the Kyocera Command Center RX interface.","title":"Kyocera Command Center RX: Plaintext password exposure (CVE-2023-49367)","url":"https://feed.craftedsignal.io/briefs/2026-10-kyocera-cve-2023-49367/"}],"language":"en","title":"CraftedSignal Threat Feed - Kyocera","version":"https://jsonfeed.org/version/1.1"}