Products
Toshiba printers
Source
ecc0f906-8666-484c-bcf8-c3b7520a72f0
Tags
CVE-2024-27162 details
Published : June 14, 2024, 4:15 a.m.
Last Modified : June 14, 2024, 4:15 a.m.
Last Modified : June 14, 2024, 4:15 a.m.
Description
Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6.1 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
CVSS Data
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Base Score
6.1
Exploitability Score
Impact Score
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
References
| URL | Source |
|---|---|
| https://jvn.jp/en/vu/JVNVU97136265/index.html | ecc0f906-8666-484c-bcf8-c3b7520a72f0 |
| https://www.toshibatec.com/information/20240531_01.html | ecc0f906-8666-484c-bcf8-c3b7520a72f0 |
| https://www.toshibatec.com/information/pdf/information20240531_01.pdf | ecc0f906-8666-484c-bcf8-c3b7520a72f0 |
This website uses the NVD API, but is not approved or certified by it.