← Vulnerability feed

Vulnerability record · CVE-2023-25954 · published 13 April 2023

CVE-2023-25954: Kyocera mobile print exposure of resource to wrong sphere vulnerability

Kyocera · Mobile Print

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and direct the affected app to download malicious files or apps to the device without notification.

5.5 CVSS 3.1 Medium EPSS 0.34% · top 74.8% CWE-668 · Exposure of resource to wrong sphere
5.5CVSS 3.1 base score
0.34%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
10References
17 Jun 2026Last modified by NVD

Description

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and direct the affected app to download malicious files or apps to the device without notification.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://jvn.jp/en/vu/JVNVU98434809/ Third Party Advisory
https://play.google.com/store/apps/details?id=com.kyocera.kyoprint Product
https://play.google.com/store/apps/details?id=com.kyocera.kyoprintolivetti Product
https://play.google.com/store/apps/details?id=com.kyocera.kyoprinttautax Product
https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2023-04-11.html Vendor Advisory
https://jvn.jp/en/vu/JVNVU98434809/ Third Party Advisory
https://play.google.com/store/apps/details?id=com.kyocera.kyoprint Product
https://play.google.com/store/apps/details?id=com.kyocera.kyoprintolivetti Product
https://play.google.com/store/apps/details?id=com.kyocera.kyoprinttautax Product
https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2023-04-11.html Vendor Advisory

Track CVE-2023-25954 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.4CVE-2026-30277Triumph-adler mobile print path traversal vulnerabilityAn arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical internal file…EPSS 0.22%

Source: NIST National Vulnerability Database (record CVE-2023-25954), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.