💣Exploit CVE-2024-27141 - Toshiba printers use XML communication for the API

[Maksim]

CVE ID : CVE-2024-27141
Published : June 14, 2024, 3:15 a.m. | 42 minutes ago
Description : Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.