CVE-2024-27141
Vulnerability from cvelistv5
Published
2024-06-14 02:21
Modified
2024-08-02 00:27
Severity ?
EPSS score ?
Summary
Pre-authenticated Time-Based Blind XXE injection
References
Impacted products
{ "containers": { "adp": [ { "affected": [ { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2521_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2521_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2020_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2020_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2520_nc:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2520_nc", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2021_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2021_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2525_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2525_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3025_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3025_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3525_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3525_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3525_acg:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3525_acg", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-4525_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-4525_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-5525_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-5525_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-5525_acg:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-5525_acg", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-6525_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-6525_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-6525_acg:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-6525_acg", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2528-a:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2528-a", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3028-a:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3028-a", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3528-a:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3528-a", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3528-ag:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3528-ag", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-4528-a:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-4528-a", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-4528-ag:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-4528-ag", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-5528-a:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-5528-a", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-6528-a:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-6528-a", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-6526-ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-6526-ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-6527-ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-6527-ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-7527-ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-7527-ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-6529-a:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-6529-a", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-7529-a:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-7529-a", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-9029-a:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-9029-a", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-330-ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-330-ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-400-ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-400-ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2010-ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2010-ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2110-ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2110-ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2510-ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2510-ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2610-ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2610-ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2015-nc:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2015-nc", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2515-nc:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2515-nc", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-2615-nc:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-2615-nc", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3015-nc:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3015-nc", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3115-nc:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3115-nc", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3515-nc:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3515-nc", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-3615-nc:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-3615-nc", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-4515_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-4515_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "cpes": [ "cpe:2.3:h:toshibatec:e-studio-4615_ac:-:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "e-studio-4615_ac", "vendor": "toshibatec", "versions": [ { "lessThanOrEqual": "*", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "metrics": [ { "other": { "content": { "id": "CVE-2024-27141", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-06-14T16:54:46.512176Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-06-14T19:55:17.614Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" }, { "providerMetadata": { "dateUpdated": "2024-08-02T00:27:59.773Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://www.toshibatec.com/information/20240531_01.html" }, { "tags": [ "x_transferred" ], "url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf" }, { "tags": [ "x_transferred" ], "url": "https://jvn.jp/en/vu/JVNVU97136265/index.html" }, { "tags": [ "x_transferred" ], "url": "http://seclists.org/fulldisclosure/2024/Jul/1" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "platforms": [ "Linux" ], "product": "Toshiba Tec e-Studio multi-function peripheral (MFP)", "vendor": "Toshiba Tec Corporation", "versions": [ { "status": "affected", "version": "see the reference URL" } ] } ], "credits": [ { "lang": "en", "type": "finder", "value": "We expresses its gratitude to Pierre Barre for reporting relevant security vulnerabilities for our products." } ], "datePublic": "2024-06-14T02:00:00.000Z", "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information.\u0026nbsp;As for the affected products/models/versions, see the reference URL." } ], "value": "Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information.\u00a0As for the affected products/models/versions, see the reference URL." } ], "exploits": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "We are not aware of any malicious exploitation by these vulnerabilities.\u003cbr\u003e" } ], "value": "We are not aware of any malicious exploitation by these vulnerabilities." } ], "impacts": [ { "capecId": "CAPEC-197", "descriptions": [ { "lang": "en", "value": "CAPEC-197 XML Entity Expansion" } ] } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-776", "description": "CWE-776 Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-06-14T02:21:24.696Z", "orgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "shortName": "Toshiba" }, "references": [ { "url": "https://www.toshibatec.com/information/20240531_01.html" }, { "url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf" }, { "url": "https://jvn.jp/en/vu/JVNVU97136265/index.html" }, { "url": "http://seclists.org/fulldisclosure/2024/Jul/1" } ], "solutions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "This issue is fixed in the version released on June 14, 2024 and all later versions.\u003cbr\u003e" } ], "value": "This issue is fixed in the version released on June 14, 2024 and all later versions." } ], "source": { "discovery": "UNKNOWN" }, "timeline": [ { "lang": "en", "time": "2024-06-14T02:00:00.000Z", "value": "Fixes will be released" } ], "title": "Pre-authenticated Time-Based Blind XXE injection", "workarounds": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.\u003cbr\u003e" } ], "value": "When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users." } ], "x_generator": { "engine": "Vulnogram 0.1.0-dev" } } }, "cveMetadata": { "assignerOrgId": "ecc0f906-8666-484c-bcf8-c3b7520a72f0", "assignerShortName": "Toshiba", "cveId": "CVE-2024-27141", "datePublished": "2024-06-14T02:21:24.696Z", "dateReserved": "2024-02-21T02:11:53.249Z", "dateUpdated": "2024-08-02T00:27:59.773Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2024-27141\",\"sourceIdentifier\":\"ecc0f906-8666-484c-bcf8-c3b7520a72f0\",\"published\":\"2024-06-14T03:15:09.700\",\"lastModified\":\"2024-07-04T05:15:11.080\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information.\u00a0As for the affected products/models/versions, see the reference URL.\"},{\"lang\":\"es\",\"value\":\"Las impresoras Toshiba utilizan comunicaci\u00f3n XML para el endpoint API proporcionado por la impresora. Para el endpoint, se utiliza la biblioteca de an\u00e1lisis XML y es vulnerable a una vulnerabilidad de entidad externa XML ciega (XXE) basada en el tiempo. Un atacante puede hacer DoS en las impresoras enviando una solicitud HTTP sin autenticaci\u00f3n. Un atacante puede explotar el XXE para recuperar informaci\u00f3n. En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"ecc0f906-8666-484c-bcf8-c3b7520a72f0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"ecc0f906-8666-484c-bcf8-c3b7520a72f0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-776\"}]}],\"references\":[{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/1\",\"source\":\"ecc0f906-8666-484c-bcf8-c3b7520a72f0\"},{\"url\":\"https://jvn.jp/en/vu/JVNVU97136265/index.html\",\"source\":\"ecc0f906-8666-484c-bcf8-c3b7520a72f0\"},{\"url\":\"https://www.toshibatec.com/information/20240531_01.html\",\"source\":\"ecc0f906-8666-484c-bcf8-c3b7520a72f0\"},{\"url\":\"https://www.toshibatec.com/information/pdf/information20240531_01.pdf\",\"source\":\"ecc0f906-8666-484c-bcf8-c3b7520a72f0\"}]}}" } }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.