CVE-2022-25343: Olivetti D-Color MF3555 Firmware

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Denial of Service. An unauthenticated attacker, who can send POST requests to the /download/set.cgi page by manipulating the failhtmfile variable, is able to cause interruption of the service provided by the Web Application.

Affected products

• Olivetti D-Color MF3555 Firmware: version 2xd_s000.002.271 only

Published 2022-04-20. Last modified 2026-06-17.