CVE-2022-41830: Kyocera Ecosys m2535dn Firmware

Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated attacker with an administrative privilege to inject arbitrary script. Affected products/versions are as follows: TASKalfa 7550ci/6550ci, TASKalfa 5550ci/4550ci/3550ci/3050ci, TASKalfa 255c/205c, TASKalfa 256ci/206ci, ECOSYS M6526cdn/M6526cidn, FS-C2126MFP/C2126MFP+/C2026MFP/C2026MFP+, TASKalfa 8000i/6500i, TASKalfa 5500i/4500i/3500i, TASKalfa 305/255, TASKalfa 306i/256i, LS-3140MFP/3140MFP+/3640MFP, ECOSYS M2535dn, LS-1135MFP/1035MFP, LS-C8650DN/C8600DN, ECOSYS P6026cdn, FS-C5250DN, LS-4300DN/4200DN/2100DN, ECOSYS P4040dn, ECOSYS P2135dn, and FS-1370DN.

Affected products

  • Kyocera Ecosys m2535dn Firmware: affected versions not specified
  • Kyocera Ecosys m6526cdn Firmware: affected versions not specified
  • Kyocera Ecosys m6526cidn Firmware: affected versions not specified
  • Kyocera Ecosys p2135dn Firmware: affected versions not specified
  • Kyocera Ecosys p4040dn Firmware: affected versions not specified
  • Kyocera Ecosys p6026cdn Firmware: affected versions not specified
  • Kyocera Fs-1370dn Firmware: affected versions not specified
  • Kyocera Fs-c2026mfp Firmware: affected versions not specified
  • Kyocera Fs-c2126mfp+ Firmware: affected versions not specified
  • Kyocera Fs-c2126mfp Firmware: affected versions not specified
  • Kyocera Fs-c5250dn Firmware: affected versions not specified
  • Kyocera Ls-1035mfp Firmware: affected versions not specified
  • Kyocera Ls-1135mfp Firmware: affected versions not specified
  • Kyocera Ls-2100dn Firmware: affected versions not specified
  • Kyocera Ls-3140mfp+ Firmware: affected versions not specified
  • Kyocera Ls-3140mfp Firmware: affected versions not specified
  • Kyocera Ls-3640mfp Firmware: affected versions not specified
  • Kyocera Ls-4200dn Firmware: affected versions not specified
  • Kyocera Ls-4300dn Firmware: affected versions not specified
  • Kyocera Ls-c8600dn Firmware: affected versions not specified
  • Kyocera Ls-c8650dn Firmware: affected versions not specified
  • Kyocera Taskalfa 205c Firmware: affected versions not specified
  • Kyocera Taskalfa 206ci Firmware: affected versions not specified
  • Kyocera Taskalfa 255 Firmware: affected versions not specified
  • Kyocera Taskalfa 255c Firmware: affected versions not specified
  • and 15 more

Published 2022-12-05. Last modified 2026-06-17.