PT-2024-5173
CVE-2024-3496
·
تاريخ النشر
2024-02-14
·
تاريخ التحديث
2024-06-20
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Toshiba e-STUDIO2518A (affected versions not specified)
Description:
The issue allows attackers to bypass the web login authentication process, gaining access to the printer's system information and enabling the upload of malicious drivers. This is achieved by exploiting an alternative path or channel, potentially allowing a remote attacker to bypass security restrictions and upload arbitrary files.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾