CVE-2023-25954

MEDIUM 5.5CVE-2023-25954 · Published 13/04/2023 · updated 17/06/2026

In short

CVE-2023-25954 is a MEDIUM (CVSS 5.5) vulnerability affecting mobile print (kyocera), mobile print (olivetti), mobile print (triumph-adler).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mobile print kyocera	`≤ 3.2.0.230119`	No fix yet
mobile print olivetti	`≤ 3.2.0.230119`	No fix yet
mobile print triumph-adler	`≤ 3.2.0.230119`	No fix yet

Description

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and direct the affected app to download malicious files or apps to the device without notification.

References

jvn.jp/en/vu/JVNVU98434809 · Third Party Advisory
play.google.com/store/apps/details · Product
play.google.com/store/apps/details · Product
play.google.com/store/apps/details · Product
kyoceradocumentsolutions.com/en/our-business/security/information/2023-04-11.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free