8321 matches found
CVE-2024-27159 Hardcoded password used to encrypt logs
All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for th...
CVE-2024-27159
CVE-2024-27159 affects Toshiba printers with a shell script that uses a hardcoded key to encrypt logs. An attacker with local access can decrypt the encrypted logs using that key. The issue is documented across multiple sources (CVE record, OpenVAS, and vendor advisories) with remediation guidanc...
CVE-2024-27158 Hardcoded root password
All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL...
CVE-2024-27158
CVE-2024-27158 affects Toshiba printers/MFPs (e.g., e-STUDIO). Root cause is a hardcoded root password shared across affected models. Impact is indicated as high for confidentiality, integrity, and availability, with a local attack vector and no user interaction required (CVSSv3.1: AV=L/AC=H/PR=N...
CVE-2024-27158 Hardcoded root password
All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL...
PT-2024-21694 · Toshiba · Toshiba Printers
Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns Toshiba printers that have programs containing a hardcoded key used for file encryption. An attacker can exploit this by using the hardcoded key to decrypt...
PT-2024-21691 · Toshiba · Toshiba Printers
Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns a shell script in Toshiba printers that uses a hardcoded key for log encryption. An attacker can exploit this by decrypting the encrypted files using the hardcod...
PT-2024-21690 · Toshiba · Toshiba Printers
Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns a hardcoded root password shared among all Toshiba printers. There is no information provided about the estimated number of potentially affected devices worldwid...
PT-2024-21701 · Toshiba Tec · Toshiba Tec E-Studio Multi-Function Peripheral
Name of the Vulnerable Software and Affected Versions: Product Name affected versions not specified Description: The issue involves hardcoded keys used for authentication to an internal API. If an attacker obtains these private keys, they may bypass authentication and access administrative...
PT-2024-27697 · Trendnet · Trendnet Tew-814Dap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-814DAP version 1 FW1.01B01 Description: The issue allows attackers to log in as root due to a hardcoded password vulnerability found in /etc/shadow.sample. This enables unauthorized access to the system. Recommendations: For...
CVE-2024-34539
CVE-2024-34539 describes hardcoded credentials in TerraMaster TOS firmware up to v5.1, enabling remote login to the mail/webmail server and to the administration panel, with privilege actions possible. Remediation noted in connected sources: upgrade to firmware that removes hardcoded credentials ...
CVE-2024-37644
TRENDnet TEW-814DAP v1FW1.01B01 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...
CVE-2024-37644
CVE-2024-37644 affects TRENDnet TEW-814DAP v1 (FW1.01B01). A hardcoded password in /etc/shadow.sample enables root login. CVSS v3.1: 8.8 (Network, HIGH impact across Confidentiality, Integrity, Availability). No remediation details are provided in the connected documents; exploitation status is n...
CVE-2024-34539
Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server. These credentials can also be used to login to the administration panel and to perform privileged actions...
PT-2024-21693 · Toshiba · Toshiba Printers
Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns a shell script in Toshiba printers that uses a hardcoded key for log encryption. An attacker can exploit this by decrypting the encrypted files using the hardcod...
PT-2024-21697 · Toshiba · Toshiba Printers
Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns hardcoded credentials in Toshiba printers. There is no information provided about the estimated number of potentially affected devices worldwide or details about...
PT-2024-25958 · Terramaster · Terramaster Tos
Name of the Vulnerable Software and Affected Versions: TerraMaster TOS firmware versions through 5.1 Description: The issue concerns hardcoded credentials in the firmware, allowing a remote attacker to login to the mail or webmail server. These credentials can also be used to access the...
CVE-2024-37644
TRENDnet TEW-814DAP v1FW1.01B01 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...
