critical10.0Public exploit code
CVE-2012-1239
The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, an…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Toshiba e-Studio (Multiple Devices) - Security Bypass2011-10-17 · remote · multiple · Verified
Impact
The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Toshibatec | E-Studio-167 With Network Printer Kit Firmware | Version t282cn0j421 |
| Toshibatec | E-Studio-181 With Network Printer Kit Firmware | Version t282cn0j421 |
| Toshibatec | E-Studio-182 With Network Printer Kit Firmware | Version t282cn0j421 |
| Toshibatec | E-Studio-207 With Network Printer Kit Firmware | Version t282cn0j421 |
| Toshibatec | E-Studio-232 Firmware | Version t377sy0j354 |
| Toshibatec | E-Studio-2330c Firmware | Version t450sy0j302 |
| Toshibatec | E-Studio-2500c Firmware | Version t380sy0j354 |
| Toshibatec | E-Studio-255 Firmware | Version t470sy0j302 |
| Toshibatec | E-Studio-255p Firmware | Version t470sy0j302 |
| Toshibatec | E-Studio-281c Firmware | Version t410sy0j354 |
| Toshibatec | E-Studio-282 Firmware | Version t377sy0j354 |
| Toshibatec | E-Studio-2830c Firmware | Version t450sy0j302 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN92830293/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000028
- http://www.toshibatec.co.jp/information/2012/20120405/
- http://jvn.jp/en/jp/JVN92830293/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000028
- http://www.toshibatec.co.jp/information/2012/20120405/