Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Toshiba
Published: 2024-06-14T02:21:24.696Z
Updated: 2024-08-02T00:27:59.773Z
Reserved: 2024-02-21T02:11:53.249Z
Link: CVE-2024-27141
Vulnrichment
Updated: 2024-08-02T00:27:59.773Z
NVD
Status : Awaiting Analysis
Published: 2024-06-14T03:15:09.700
Modified: 2024-11-21T09:03:56.060
Link: CVE-2024-27141
Redhat
No data.