CVE-2024-3497

Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the affected products/models/versions, see the reference URL.

Score

CVSS 3.1 8.8 High

Status

Deferred - ecc0f906-8666-484c-bcf8-c3b7520a72f0

Published

2024-06-14

Last modified

2024-08-01

Weaknesses

CWE-23

Affected products

• Toshiba Tec E-studio Multi-function Peripheral Mfp (Toshiba Tec Corporation)
• E-studio-2010-ac (Toshibatec)
• E-studio-2015-nc (Toshibatec)
• E-studio-2018 A (Toshibatec)
• E-studio-2020 Ac (Toshibatec)
• E-studio-2021 Ac (Toshibatec)
• E-studio-2110-ac (Toshibatec)
• E-studio-2510-ac (Toshibatec)
• E-studio-2515-nc (Toshibatec)
• E-studio-2518 A (Toshibatec)
• E-studio-2520 Nc (Toshibatec)
• E-studio-2521 Ac (Toshibatec)
• E-studio-2525 Ac (Toshibatec)
• E-studio-2528-a (Toshibatec)
• E-studio-2610-ac (Toshibatec)
• E-studio-2615-nc (Toshibatec)
• E-studio-2618 A (Toshibatec)
• E-studio-3015-nc (Toshibatec)
• E-studio-3018 A (Toshibatec)
• E-studio-3025 Ac (Toshibatec)
• E-studio-3028-a (Toshibatec)
• E-studio-3115-nc (Toshibatec)
• E-studio-3118 A (Toshibatec)
• E-studio-3118 Ag (Toshibatec)
• E-studio-330-ac (Toshibatec)
• E-studio-3515-nc (Toshibatec)
• E-studio-3525 Ac (Toshibatec)
• E-studio-3525 Acg (Toshibatec)
• E-studio-3528-a (Toshibatec)
• E-studio-3528-ag (Toshibatec)
• E-studio-3615-nc (Toshibatec)
• E-studio-400-ac (Toshibatec)
• E-studio-4515 Ac (Toshibatec)
• E-studio-4525 Ac (Toshibatec)
• E-studio-4528-a (Toshibatec)
• E-studio-4528-ag (Toshibatec)
• E-studio-4615 Ac (Toshibatec)
• E-studio-5015 Ac (Toshibatec)
• E-studio-5115 Ac (Toshibatec)
• E-studio-5525 Ac (Toshibatec)
• E-studio-5525 Acg (Toshibatec)
• E-studio-5528-a (Toshibatec)
• E-studio-6525 Ac (Toshibatec)
• E-studio-6525 Acg (Toshibatec)
• E-studio-6526-ac (Toshibatec)
• E-studio-6527-ac (Toshibatec)
• E-studio-6528-a (Toshibatec)
• E-studio-6529-a (Toshibatec)
• E-studio-7527-ac (Toshibatec)
• E-studio-7529-a (Toshibatec)
• E-studio-9029-a (Toshibatec)

References

• https://jvn.jp/en/vu/JVNVU97136265/index.html
• https://www.toshibatec.com/information/20240531_01.html
• https://www.toshibatec.com/information/pdf/information20240531_01.pdf