← Back

CVE-2024-3497

nvd nist
Published: Jun 14, 2024Modified: Jun 17, 2026Deferred

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: ecc0f906-8666-484c-bcf8-c3b7520a72f0 (Secondary)

Description

Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the affected products/models/versions, see the reference URL.

Related CWEs

CWE-23
Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

References (6)

Source: ecc0f906-8666-484c-bcf8-c3b7520a72f0
Source: ecc0f906-8666-484c-bcf8-c3b7520a72f0
Source: ecc0f906-8666-484c-bcf8-c3b7520a72f0
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.