Details of VAR-201211-0282

ID

VAR-201211-0282

CVE

CVE-2012-5174

TITLE

Multiple KYOCERA mobile devices may reboot during email reception

Trust: 0.8

sources: JVNDB: JVNDB-2012-000105

DESCRIPTION

The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial of service (persistent reboot) via an e-mail message in an invalid format. When this issue occurs, the device will always reboot when attempting to receive the invalid email. Masashi Shimizu reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.When receiving an invalid email, the device will always reboot, therefore emails cannot be received. KYOCERA is a Japanese electronic equipment manufacturer. Multiple Kyocera mobile devices are prone to a denial-of-service vulnerability. Attackers may leverage this issue to crash the affected mobile devices, denying service to legitimate users

Trust: 2.43

sources: NVD: CVE-2012-5174 // JVNDB: JVNDB-2012-000105 // CNVD: CNVD-2012-7216 // BID: 56886

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2012-7216

AFFECTED PRODUCTS

vendor:	kyocera	model:	ah-k3001v	scope:	eq	version:	-	Trust: 1.6
vendor:	kyocera	model:	xw320k	scope:	eq	version:	-	Trust: 1.6
vendor:	kyocera	model:	xw300k	scope:	eq	version:	-	Trust: 1.6
vendor:	kyocera	model:	xw320kr	scope:	eq	version:	-	Trust: 1.6
vendor:	kyocera	model:	xw310k	scope:	eq	version:	-	Trust: 1.6
vendor:	kyocera	model:	ah-k3002v	scope:	eq	version:	-	Trust: 1.6
vendor:	kyocera	model:	ah-k3001v	scope:	-	version:	-	Trust: 1.4
vendor:	kyocera	model:	ah-k3002v	scope:	-	version:	-	Trust: 1.4
vendor:	kyocera	model:	wx300k	scope:	-	version:	-	Trust: 1.4
vendor:	kyocera	model:	wx310k	scope:	-	version:	-	Trust: 1.4
vendor:	kyocera	model:	wx320k	scope:	-	version:	-	Trust: 1.4
vendor:	kyocera	model:	wx320kr	scope:	-	version:	-	Trust: 1.4
vendor:	kyocera	model:	wx320kr	scope:	eq	version:	0	Trust: 0.3
vendor:	kyocera	model:	wx320k	scope:	eq	version:	0	Trust: 0.3
vendor:	kyocera	model:	wx310k	scope:	eq	version:	0	Trust: 0.3
vendor:	kyocera	model:	wx300k	scope:	eq	version:	0	Trust: 0.3
vendor:	kyocera	model:	ah-k3002v	scope:	eq	version:	0	Trust: 0.3
vendor:	kyocera	model:	ah-k3001v	scope:	eq	version:	0	Trust: 0.3

sources: CNVD: CNVD-2012-7216 // BID: 56886 // JVNDB: JVNDB-2012-000105 // CNNVD: CNNVD-201211-578 // NVD: CVE-2012-5174

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2012-5174
value:	HIGH
Trust: 1.0
IPA:	JVNDB-2012-000105
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201211-578
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2012-5174
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
IPA:	JVNDB-2012-000105
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8

sources: JVNDB: JVNDB-2012-000105 // CNNVD: CNNVD-201211-578 // NVD: CVE-2012-5174

PROBLEMTYPE DATA

problemtype:

NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2012-5174

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201211-578

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201211-578

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-000105

PATCH

title:

Multiple KYOCERA mobile devices may reboot during email reception

url:

http://jvn.jp/en/jp/JVN83907168/361447/index.html

Trust: 0.8

sources: JVNDB: JVNDB-2012-000105

EXTERNAL IDS

db:	NVD	id:	CVE-2012-5174	Trust: 3.3
db:	JVN	id:	JVN83907168	Trust: 3.3
db:	JVNDB	id:	JVNDB-2012-000105	Trust: 2.4
db:	CNVD	id:	CNVD-2012-7216	Trust: 0.6
db:	JVN	id:	JVN#83907168	Trust: 0.6
db:	CNNVD	id:	CNNVD-201211-578	Trust: 0.6
db:	BID	id:	56886	Trust: 0.3

sources: CNVD: CNVD-2012-7216 // BID: 56886 // JVNDB: JVNDB-2012-000105 // CNNVD: CNNVD-201211-578 // NVD: CVE-2012-5174

REFERENCES

url:	http://jvn.jp/en/jp/jvn83907168/index.html	Trust: 3.3
url:	http://jvn.jp/en/jp/jvn83907168/361447/index.html	Trust: 1.9
url:	http://jvndb.jvn.jp/jvndb/jvndb-2012-000105	Trust: 1.6
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-5174	Trust: 0.8
url:	http://global.kyocera.com/	Trust: 0.3

sources: CNVD: CNVD-2012-7216 // BID: 56886 // JVNDB: JVNDB-2012-000105 // CNNVD: CNNVD-201211-578 // NVD: CVE-2012-5174

CREDITS

Masashi Shimizu

Trust: 0.3

sources: BID: 56886

SOURCES

db:	CNVD	id:	CNVD-2012-7216
db:	BID	id:	56886
db:	JVNDB	id:	JVNDB-2012-000105
db:	CNNVD	id:	CNNVD-201211-578
db:	NVD	id:	CVE-2012-5174

LAST UPDATE DATE

2025-04-11T23:15:27.697000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2012-7216	date:	2012-12-04T00:00:00
db:	BID	id:	56886	date:	2012-11-30T00:00:00
db:	JVNDB	id:	JVNDB-2012-000105	date:	2012-11-30T00:00:00
db:	CNNVD	id:	CNNVD-201211-578	date:	2012-12-05T00:00:00
db:	NVD	id:	CVE-2012-5174	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2012-7216	date:	2012-12-04T00:00:00
db:	BID	id:	56886	date:	2012-11-30T00:00:00
db:	JVNDB	id:	JVNDB-2012-000105	date:	2012-11-30T00:00:00
db:	CNNVD	id:	CNNVD-201211-578	date:	2012-11-30T00:00:00
db:	NVD	id:	CVE-2012-5174	date:	2012-11-30T12:54:17.360