VulnerabilityModified

CVE-2012-5174

The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial of service (persistent reboot) via an e-mail message in an invalid format.

HIGH 7.8EPSS 2.57%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.57%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial of service (persistent reboot) via an e-mail message in an invalid format.

CVSS 2.0: 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS: 2.57% probability · 84th percentile
CISA KEV: Not listed
Affected: kyocera/ah-k3001v · kyocera/ah-k3002v · kyocera/xw300k · kyocera/xw310k · kyocera/xw320k · kyocera/xw320kr
Source: vultures@jpcert.or.jp

References

http://jvn.jp/en/jp/JVN83907168/361447/index.html
http://jvn.jp/en/jp/JVN83907168/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000105
http://jvn.jp/en/jp/JVN83907168/361447/index.html
http://jvn.jp/en/jp/JVN83907168/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000105

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.