Directory Traversal Remote Code Execution Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Toshiba Tec Corporation | Toshiba Tec e-Studio multi-function peripheral (MFP) | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
This issue is fixed in the version released on June 14, 2024 and all later versions.
Vendor Workaround
When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-32083 | Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the affected products/models/versions, see the reference URL. |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.740% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.
No data.