CVE-2024-3497

Directory Traversal Remote Code Execution Vulnerability

Published Jun 14, 2024 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the affected products/models/versions, see the reference URL.

Remediation

Vendor Solution

This issue is fixed in the version released on June 14, 2024 and all later versions.


Vendor Workaround

When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-32083 Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the affected products/models/versions, see the reference URL.
History

No history.

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Toshiba
Published
Updated
Aug 1, 2024, 8:12 PM
Reserved
Apr 9, 2024, 12:59 AM
Status
Deferred
Published
Jun 14, 2024, 5:15 AM
Modified
Jun 17, 2026, 7:44 AM