CVE-2024-27162
Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.
- Affected products
- Toshiba Printers
- CVSS 3.1
- 6.1 MEDIUM
- EPSS
- 21.2% (97th percentile)
- Weakness
- CWE-79
- NVD status
- Deferred
- Published
- 2024-06-14
- Attack patterns
- CAPEC-588
- Entry point
- name upload data
- Path
- /contentwebserver/upload
Fix
This issue is fixed in the version released on June 14, 2024 and all later versions.
Workaround
When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.
CVE-2024-27162 at NVD
1 known exploit for CVE-2024-27162
Proof-of-concept code and exploit modules indexed by Sploitus