CVE-2025-63579: n/a
Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be obtained. This affects Kyocera Command Center RX TASKalfa 2552ci, TASKalfa 3252ci, TASKalfa 2553ci, TASKalfa 3253ci, TASKalfa 3554ci, TASKalfa 4052ci, TASKalfa 5052ci, TASKalfa 6052ci, TASKalfa 7052ci, TASKalfa 8052ci, TASKalfa 7353ci, TASKalfa 8353ci, TASKalfa 2554ci, TASKalfa 3254ci, TASKalfa 505.
AI Analysis
Technical Summary
CVE-2025-63579 describes an unauthorized access vulnerability affecting various Kyocera TASKalfa printer models. The flaw permits attackers to export all information stored in the printer's address book by bypassing the encryption mechanism that protects incoming data. This results in exposure of sensitive data such as passwords. The vulnerability impacts multiple TASKalfa models including 2552ci, 3252ci, 2553ci, 3253ci, 3554ci, 4052ci, 5052ci, 6052ci, 7052ci, 8052ci, 7353ci, 8353ci, 2554ci, 3254ci, and 505. There is no CVSS score or vendor advisory indicating a fix or mitigation at this time.
Potential Impact
Attackers exploiting this vulnerability can gain unauthorized access to all data stored in the Kyocera printer address book, including passwords and other sensitive information. The encryption designed to protect incoming data can be bypassed and decrypted, leading to potential data leakage and compromise of confidential information managed by the device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation instructions are currently available. Until a patch is released, restrict access to affected devices and monitor for unauthorized use.
CVE-2025-63579: n/a
Description
Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be obtained. This affects Kyocera Command Center RX TASKalfa 2552ci, TASKalfa 3252ci, TASKalfa 2553ci, TASKalfa 3253ci, TASKalfa 3554ci, TASKalfa 4052ci, TASKalfa 5052ci, TASKalfa 6052ci, TASKalfa 7052ci, TASKalfa 8052ci, TASKalfa 7353ci, TASKalfa 8353ci, TASKalfa 2554ci, TASKalfa 3254ci, TASKalfa 505.
CVSS v3.1
Score 7.5high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-63579 describes an unauthorized access vulnerability affecting various Kyocera TASKalfa printer models. The flaw permits attackers to export all information stored in the printer's address book by bypassing the encryption mechanism that protects incoming data. This results in exposure of sensitive data such as passwords. The vulnerability impacts multiple TASKalfa models including 2552ci, 3252ci, 2553ci, 3253ci, 3554ci, 4052ci, 5052ci, 6052ci, 7052ci, 8052ci, 7353ci, 8353ci, 2554ci, 3254ci, and 505. There is no CVSS score or vendor advisory indicating a fix or mitigation at this time.
Potential Impact
Attackers exploiting this vulnerability can gain unauthorized access to all data stored in the Kyocera printer address book, including passwords and other sensitive information. The encryption designed to protect incoming data can be bypassed and decrypted, leading to potential data leakage and compromise of confidential information managed by the device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation instructions are currently available. Until a patch is released, restrict access to affected devices and monitor for unauthorized use.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2025-10-27T00:00:00.000Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a4ff3f668715ace43ecf5b2
Added to database: 07/09/2026, 19:18:14 UTC
Last enriched: 07/09/2026, 19:34:11 UTC
Last updated: 07/10/2026, 02:27:15 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.