CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2020-23575Public Exploit

d-COPIA253MF Plus - Path Traversal (CVE-2020-23575)

PublishedMay 10, 2021
First SeenMay 28, 2026
Last Seen
Reported
CVSS7.5
K
Kyocerad-COPIA253MF Plus
iot

Description

A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF Plus. Successful exploitation of this vulnerability could allow an attacker to retrieve or view arbitrary files from the affected server.

psychologyCrowdSec Analysis

CVE-2020-23575 is a directory traversal vulnerability in the Kyocera Printer d-COPIA253MF plus, which allows remote attackers to access or retrieve arbitrary files from the affected server. This flaw could be exploited to expose sensitive information, potentially aiding in further attacks or unauthorized data disclosure.

CrowdSec has been tracking this vulnerability and its exploits since 15th of May 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2020-23575 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers exploit this vulnerability by sending requests to URLs containing /wlmeng/../../ sequences, attempting to traverse directories and access sensitive files such as /etc/passwd on Kyocera d-COPIA253MF printers.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2021-05-10
Rule Released2026-05-15
CrowdSec First Seen2026-05-28

Related Weaknesses

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References