PT-2024-5173

CVE-2024-3496

·

Published

2024-02-14

·

Updated

2024-06-20

Description by

CVSS 3.1
8.8
High
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Toshiba e-STUDIO2518A (affected versions not specified)
Description: The issue allows attackers to bypass the web login authentication process, gaining access to the printer's system information and enabling the upload of malicious drivers. This is achieved by exploiting an alternative path or channel, potentially allowing a remote attacker to bypass security restrictions and upload arbitrary files.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾