{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-27162", "assignerOrgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "state": "PUBLISHED", "assignerShortName": "Toshiba", "dateReserved": "2024-02-21T02:11:59.651Z", "datePublished": "2024-06-14T03:39:04.876Z", "dateUpdated": "2025-02-13T17:46:06.902Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Linux"], "product": "Toshiba Tec e-Studio multi-function peripheral (MFP)", "vendor": "Toshiba Tec Corporation", "versions": [{"status": "affected", "version": "see the reference URL"}]}], "credits": [{"lang": "en", "type": "finder", "value": "We expresses its gratitude to Pierre Barre for reporting relevant security vulnerabilities for our products."}], "datePublic": "2024-06-14T02:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL."}], "value": "Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL."}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "We are not aware of any malicious exploitation by these vulnerabilities.<br>"}], "value": "We are not aware of any malicious exploitation by these vulnerabilities."}], "impacts": [{"capecId": "CAPEC-588", "descriptions": [{"lang": "en", "value": "CAPEC-588 DOM-Based XSS"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "shortName": "Toshiba", "dateUpdated": "2024-07-04T05:07:01.220Z"}, "references": [{"url": "https://www.toshibatec.com/information/20240531_01.html"}, {"url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"}, {"url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/1"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "This issue is fixed in the version released on June 14, 2024 and all later versions.<br>"}], "value": "This issue is fixed in the version released on June 14, 2024 and all later versions."}], "source": {"discovery": "UNKNOWN"}, "timeline": [{"lang": "en", "time": "2024-06-14T02:00:00.000Z", "value": "Fixes will be released"}], "title": "DOM-based XSS", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.<br>"}], "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users."}], "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "toshibatec", "product": "e-studio-2521_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2521_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2020_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2020_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2520_nc", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2520_nc:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2021_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2021_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2525_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2525_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3025_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3025_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3525_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3525_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3525_acg", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3525_acg:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-4525_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-4525_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-5525_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-5525_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-5525_acg", "cpes": ["cpe:2.3:h:toshibatec:e-studio-5525_acg:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-6525_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-6525_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-6525_acg", "cpes": ["cpe:2.3:h:toshibatec:e-studio-6525_acg:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2528-a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2528-a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3028-a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3028-a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3528-a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3528-a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3528-ag", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3528-ag:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-4528-a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-4528-a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-4528-ag", "cpes": ["cpe:2.3:h:toshibatec:e-studio-4528-ag:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-5528-a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-5528-a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-6528-a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-6528-a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-6526-ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-6526-ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-6527-ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-6527-ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-7527-ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-7527-ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-6529-a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-6529-a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-7529-a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-7529-a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-9029-a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-9029-a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-330-ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-330-ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-400-ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-400-ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2010-ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2010-ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2110-ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2110-ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2510-ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2510-ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2610-ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2610-ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2015-nc", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2015-nc:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2515-nc", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2515-nc:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2615-nc", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2615-nc:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3015-nc", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3015-nc:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3115-nc", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3115-nc:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3515-nc", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3515-nc:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3615-nc", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3615-nc:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-4515_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-4515_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-4615_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-4615_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-5015_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-5015_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-5115_ac", "cpes": ["cpe:2.3:h:toshibatec:e-studio-5115_ac:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2018_a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2018_a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2518_a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2518_a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-2618_a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-2618_a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3018_a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3018_a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3118_a", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3118_a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}, {"vendor": "toshibatec", "product": "e-studio-3118_ag", "cpes": ["cpe:2.3:h:toshibatec:e-studio-3118_ag:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "*", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-14T16:46:51.633520Z", "id": "CVE-2024-27162", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:27:58.828Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:27:59.695Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.toshibatec.com/information/20240531_01.html", "tags": ["x_transferred"]}, {"url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU97136265/index.html", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/1", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.toshibatec.com/information/20240531_01.html", "tags": ["x_transferred"]}, {"url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU97136265/index.html", "tags": ["x_transferred"]}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/1", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:27:59.695Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27162", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-14T16:46:51.633520Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:toshibatec:e-studio-2521_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2521_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2020_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2020_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2520_nc:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2520_nc", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2021_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2021_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2525_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2525_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3025_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3025_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3525_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3525_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3525_acg:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3525_acg", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-4525_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-4525_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-5525_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-5525_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-5525_acg:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-5525_acg", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-6525_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-6525_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-6525_acg:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-6525_acg", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2528-a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2528-a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3028-a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3028-a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3528-a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3528-a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3528-ag:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3528-ag", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-4528-a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-4528-a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-4528-ag:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-4528-ag", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-5528-a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-5528-a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-6528-a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-6528-a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-6526-ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-6526-ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-6527-ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-6527-ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-7527-ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-7527-ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-6529-a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-6529-a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-7529-a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-7529-a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-9029-a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-9029-a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-330-ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-330-ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-400-ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-400-ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2010-ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2010-ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2110-ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2110-ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2510-ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2510-ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2610-ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2610-ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2015-nc:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2015-nc", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2515-nc:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2515-nc", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2615-nc:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2615-nc", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3015-nc:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3015-nc", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3115-nc:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3115-nc", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3515-nc:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3515-nc", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3615-nc:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3615-nc", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-4515_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-4515_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-4615_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-4615_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-5015_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-5015_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-5115_ac:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-5115_ac", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2018_a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2018_a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2518_a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2518_a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-2618_a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-2618_a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3018_a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3018_a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3118_a:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3118_a", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:toshibatec:e-studio-3118_ag:-:*:*:*:*:*:*:*"], "vendor": "toshibatec", "product": "e-studio-3118_ag", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:27:22.091Z"}}], "cna": {"title": "DOM-based XSS", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "We expresses its gratitude to Pierre Barre for reporting relevant security vulnerabilities for our products."}], "impacts": [{"capecId": "CAPEC-588", "descriptions": [{"lang": "en", "value": "CAPEC-588 DOM-Based XSS"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Toshiba Tec Corporation", "product": "Toshiba Tec e-Studio multi-function peripheral (MFP)", "versions": [{"status": "affected", "version": "see the reference URL"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "We are not aware of any malicious exploitation by these vulnerabilities.", "supportingMedia": [{"type": "text/html", "value": "We are not aware of any malicious exploitation by these vulnerabilities.<br>", "base64": false}]}], "timeline": [{"lang": "en", "time": "2024-06-14T02:00:00.000Z", "value": "Fixes will be released"}], "solutions": [{"lang": "en", "value": "This issue is fixed in the version released on June 14, 2024 and all later versions.", "supportingMedia": [{"type": "text/html", "value": "This issue is fixed in the version released on June 14, 2024 and all later versions.<br>", "base64": false}]}], "datePublic": "2024-06-14T02:00:00.000Z", "references": [{"url": "https://www.toshibatec.com/information/20240531_01.html"}, {"url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"}, {"url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/1"}], "workarounds": [{"lang": "en", "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.", "supportingMedia": [{"type": "text/html", "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.<br>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.", "supportingMedia": [{"type": "text/html", "value": "Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "shortName": "Toshiba", "dateUpdated": "2024-07-04T05:07:01.220Z"}}}, "cveMetadata": {"cveId": "CVE-2024-27162", "state": "PUBLISHED", "dateUpdated": "2025-02-13T17:46:06.902Z", "dateReserved": "2024-02-21T02:11:59.651Z", "assignerOrgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "datePublished": "2024-06-14T03:39:04.876Z", "assignerShortName": "Toshiba"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL."}, {"lang": "es", "value": "Las impresoras Toshiba proporcionan una interfaz web que cargar\u00e1 el archivo JavaScript. El archivo contiene c\u00f3digos inseguros vulnerables a XSS y se carga dentro de todas las p\u00e1ginas web proporcionadas por la impresora. Un atacante puede robar la cookie de un usuario administrador. En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia."}], "id": "CVE-2024-27162", "lastModified": "2024-11-21T09:03:59.477", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "type": "Secondary"}]}, "published": "2024-06-14T04:15:31.783", "references": [{"source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "url": "http://seclists.org/fulldisclosure/2024/Jul/1"}, {"source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"}, {"source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "url": "https://www.toshibatec.com/information/20240531_01.html"}, {"source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2024/Jul/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.toshibatec.com/information/20240531_01.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"}], "sourceIdentifier": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "type": "Secondary"}]}

{}