CVE-2024-3496

Authentication Bypass Vulnerability

Published Jun 14, 2024 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
Attackers can bypass the web login authentication process to gain access to the printer's system information and upload malicious drivers to the printer. As for the affected products/models/versions, see the reference URL.

Remediation

Vendor Solution

This issue is fixed in the version released on June 14, 2024 and all later versions.


Vendor Workaround

When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-32082 Attackers can bypass the web login authentication process to gain access to the printer's system information and upload malicious drivers to the printer. As for the affected products/models/versions, see the reference URL.
History

No history.

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Toshiba
Published
Updated
Aug 19, 2024, 12:45 PM
Reserved
Apr 9, 2024, 12:59 AM
Status
Deferred
Published
Jun 14, 2024, 5:15 AM
Modified
Jun 17, 2026, 7:44 AM