CVE-2024-3496 - Authentication Bypass Vulnerability

Back Back to CVE browser

HIGH

Authentication Bypass Vulnerability

Published Jun 14, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.70%

Description

Attackers can bypass the web login authentication process to gain access to the printer's system information and upload malicious drivers to the printer. As for the affected products/models/versions, see the reference URL.

Affected products

Vendor Toshiba Tec Corporation Product Toshiba Tec e-Studio multi-function peripheral (MFP) Default
unaffected
- Version
  see the reference URL
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Toshiba Tec Corporation

Toshiba Tec e-Studio multi-function peripheral (MFP)

unaffected

Version	Status	Constraints
see the reference URL	affected	-

Vendor Toshibatec Product E-Studio-2010-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2015-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2018 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2020 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2021 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2110-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2510-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2515-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2518 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2520 NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2521 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2610-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2615-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-2618 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3015-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3018 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3025 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3028-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3115-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3118 A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3118 AG Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-330-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3515-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3525 Acg Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3528-AG Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-3615-NC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-400-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4515 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4528-AG Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-4615 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5015 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5115 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5525 Acg Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-5528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6525 AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6525 Acg Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6526-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6527-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6528-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-6529-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-7527-AC Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-7529-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Toshibatec Product E-Studio-9029-A Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Toshibatec

E-Studio-2010-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2015-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2018 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2020 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2021 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2110-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2510-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2515-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2518 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2520 NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2521 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2610-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2615-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-2618 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3015-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3018 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3025 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3028-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3115-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3118 A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3118 AG

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-330-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3515-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3525 Acg

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3528-AG

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-3615-NC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-400-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4515 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4528-AG

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-4615 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5015 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5115 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5525 Acg

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-5528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6525 AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6525 Acg

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6526-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6527-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6528-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-6529-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-7527-AC

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-7529-A

n/a

Version	Status	Constraints
0	affected	<=*

Toshibatec

E-Studio-9029-A

n/a

Version	Status	Constraints
0	affected	<=*

Remediation

Vendor solution

This issue is fixed in the version released on June 14, 2024 and all later versions.

Weaknesses (1)

CWE-288

References (3)

Link	Providers	Tags
https://jvn.jp/en/vu/JVNVU97136265/index.html
https://www.toshibatec.com/information/20240531_01.html
https://www.toshibatec.com/information/pdf/information20240531_01.pdf

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Toshiba

Published Jun 14, 2024

Updated Aug 19, 2024

Reserved Apr 9, 2024

Link CVE-2024-3496

CISA Vulnrichment

Updated Aug 19, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-3496

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-3496