Kyocera’s Device Manager software, which allows IT managers to monitor and manage large fleets of Kyocera printers and multifunction devices, carried a vulnerability that could have been abused by hackers and other threat actors, according to Trustwave SpiderLab’s Senior Technical Specialist, Jordan Hedges.
In a technical writeup posted on Trustwave’s website, the company explained that the flaw “allows attackers to coerce authentication attempts to their own resources, such as a malicious SMB share, to capture or relay Active Directory hashed credentials if the 'Restrict NTLM: Outgoing NTLM traffic to remote servers' security policy is not enabled.".
