Francesco Tornieri has reported a vulnerability in Kyocera FS-118MFP, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerability is caused due to the Kyocera Command Center not properly sanitising requests before using them to display files. This can be exploited to display arbitrary files via directory traversal attacks.

Solution
Use a firewall or proxy to filter malicious requests.
Further details available to Secunia VIM customers

Provided and/or discovered by
Francesco Tornieri

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://packetstorm.linuxsecurity.com/0808-exploits/kyocera-traversal.txt

Deep Links
Links available to Secunia VIM customers