FKIE_CVE-2024-27141

Vulnerability from fkie_nvd - Published: 2024-06-14 03:15 - Updated: 2024-11-21 09:03
Severity ?
5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL.
References
ecc0f906-8666-484c-bcf8-c3b7520a72f0http://seclists.org/fulldisclosure/2024/Jul/1
ecc0f906-8666-484c-bcf8-c3b7520a72f0https://jvn.jp/en/vu/JVNVU97136265/index.html
ecc0f906-8666-484c-bcf8-c3b7520a72f0https://www.toshibatec.com/information/20240531_01.html
ecc0f906-8666-484c-bcf8-c3b7520a72f0https://www.toshibatec.com/information/pdf/information20240531_01.pdf
af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2024/Jul/1
af854a3a-2127-422b-91ae-364da2661108https://jvn.jp/en/vu/JVNVU97136265/index.html
af854a3a-2127-422b-91ae-364da2661108https://www.toshibatec.com/information/20240531_01.html
af854a3a-2127-422b-91ae-364da2661108https://www.toshibatec.com/information/pdf/information20240531_01.pdf
Impacted products
Vendor Product Version
To clipboard 

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information.\u00a0As for the affected products/models/versions, see the reference URL."
    },
    {
      "lang": "es",
      "value": "Las impresoras Toshiba utilizan comunicaci\u00f3n XML para el endpoint API proporcionado por la impresora. Para el endpoint, se utiliza la biblioteca de an\u00e1lisis XML y es vulnerable a una vulnerabilidad de entidad externa XML ciega (XXE) basada en el tiempo. Un atacante puede hacer DoS en las impresoras enviando una solicitud HTTP sin autenticaci\u00f3n. Un atacante puede explotar el XXE para recuperar informaci\u00f3n. En cuanto a los productos/modelos/versiones afectados, consulte la URL de referencia."
    }
  ],
  "id": "CVE-2024-27141",
  "lastModified": "2024-11-21T09:03:56.060",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.6,
        "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-06-14T03:15:09.700",
  "references": [
    {
      "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/1"
    },
    {
      "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0",
      "url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"
    },
    {
      "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0",
      "url": "https://www.toshibatec.com/information/20240531_01.html"
    },
    {
      "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0",
      "url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2024/Jul/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://jvn.jp/en/vu/JVNVU97136265/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.toshibatec.com/information/20240531_01.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.toshibatec.com/information/pdf/information20240531_01.pdf"
    }
  ],
  "sourceIdentifier": "ecc0f906-8666-484c-bcf8-c3b7520a72f0",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-776"
        }
      ],
      "source": "ecc0f906-8666-484c-bcf8-c3b7520a72f0",
      "type": "Secondary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.