CVE-2019-13202: Kyocera Ecosys m5526cdw Firmware

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the okhtmlfile and failhtmlfile parameters of several functionalities of the web application that would allow an unauthenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device.

Affected products

• Kyocera Ecosys m5526cdw Firmware: version 2r7_2000.001.701 only

Published 2020-03-13. Last modified 2026-06-17.