Toshiba Multi-Function Printers Impacted by 40+ Vulnerabilities

In Cybersecurity News - Original News Source is cybersecuritynews.com by Blog Writer

Post Sharing

Home Cyber Security News Toshiba Multi-Function Printers Impacted by 40+ Vulnerabilities

Toshiba Multi-Function Printers Impacted by 40+ Vulnerabilities

By

Eswar

Several new vulnerabilities have been discovered in Toshiba e-STUDIO Multi-Function Printers (MFPs) that are used by businesses and organizations worldwide.

These vulnerabilities affect 103 different models of Toshiba Multi-Function Printers. 

Vulnerabilities identified include Remote Code execution, XML External Entity Injection (XXE), Privilege Escalation, Authentication credential leak, DOM-based XSS, Insecure Permissions, TOCTOU (Time-Of-Check to Time-Of-Use) conditions, and many others.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

Toshiba Multi-Function Printers

According to the reports shared with Cyber Security News, CVE-2024-27171 and CVE-2024-27180 affect the implementation of third-party application systems and also the third-party applications that are installed by default on Toshiba Printers.

A threat actor can exploit Toshiba Multi-function printers using multiple vulnerabilities. The list of Affected Toshiba MFP models is as follows:

2021AC 4528AG 3515AC 5018A 3005AC 3508LP
2521AC 5528A 3615AC 5118A 3505AC 4508LP
2020AC 6528A 4515AC 5516AC 4505AC 5008LP
2520AC 6526AC 4615AC 5616AC 5005AC
2025NC 6527AC 5015AC 6516AC 2008A
2525AC 7527AC 5115AC 6616AC 2508A
3025AC 6529A 2018A 7516AC 3008A
3525AC 7529A 2518A 7616AC 3008AG
3525ACG 9029A 2618A 5518A 3508A
4525AC 330AC 3018A 5618A 3508AG
4525ACG 400AC 3118A 6518A 4508A
5525AC 2010AC 3018AG 6618A 4508AG
5525ACG 2110AC 3518A 7518A 5008A
6525AC 2510AC 3518AG 7618A 5506AC
6525ACG 2610AC 3618A 8518A 6506AC
2528A 2015NC 3618AG 8618A 7506AC
3028A 2515AC 4518A 2000AC 5508A
3528A 2615AC 4518AG 2500AC 6508A
3528AG 3015AC 4618A 2005NC 7508A
4528A 3115AC 4618AG 2505AC 8508A

Additionally, it was also mentioned that the physical security of the printers was not analyzed, and the vulnerabilities have been confirmed in different models that run the latest firmware versions, such as 

  • e-STUDIO2010AC
  • e-STUDIO3005AC
  • e-STUDIO3508A
  • e-STUDIO5018A

Further, all these printers run in Linux and are powerful and can be leveraged by a threat actor to move laterally inside infrastructures.

40 vulnerabilities were reported to Toshiba, and necessary security advisories have been published to address these vulnerabilities.

Users of these Toshiba products are recommended to upgrade to the latest version as per Toshiba’s security advisory to prevent these vulnerabilities from getting exploited by threat actors.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files

Managed WAF

Latest News

CISA’s CSAT Tool Hacked, Systems Taken Offline

Dhivya

Levi’s Data Breach: 72,000+ Customers’ Data Exposed