Toshiba e-STUDIO2518A Authentication Bypass Vulnerability

2024-06-1800:00:00

Zhenhua Huang from trendmicro, Harry Zhang from trendmicro, Minmin Li

www.zerodayinitiative.com

toshiba

e-studio2518a

authentication

bypass

vulnerability

network-adjacent

attackers

printers

flaw

session management

system

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

16.1%

JSON

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Toshiba e-STUDIO2518A printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue results from improper session management. An attacker can leverage this vulnerability to bypass authentication on the system.

References

www.toshibatec.com/information/20240531_01.html