Lucene search

K
jvnJapan Vulnerability NotesJVN:92830293
HistoryApr 05, 2012 - 12:00 a.m.

JVN#92830293: TOSHIBA TEC e-Studio series vulnerable to authentication bypass

2012-04-0500:00:00
Japan Vulnerability Notes
jvn.jp
10

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.6%

e-Studio is a multi-function peripheral (MFP). Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in an authentication bypass.

Impact

An attacker that can access the product may log in with administrative privileges. As a result, settings may be changed and credential information may be viewed.

Solution

Update the software
Apply the latest update for each product according to the information provided by the developer.

Products Affected

A wide range of products are affected. For more information, refer to the developer’s website.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.6%

Related for JVN:92830293