============================================================================
\nFoofus.net Security Advisory: foofus-20111026
\n============================================================================
\nTitle:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Toshiba EStudio Multifunction Printer Information Leakage
\nVersion:\u00a0\u00a0\u00a0\u00a0\u00a0 e-Studio series devices
\nVendor:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Toshiba
\nRelease Date: 01\/29\/2011
\nUpdate Date:\u00a0 10\/26\/2011
\n============================================================================<\/p>\n
1. Summary:<\/p>\n
Toshiba e-Studio multifunction printer devices found to be vulnerable to an information leakage
\nvulnerability.<\/p>\n
============================================================================<\/p>\n
2. Description:<\/p>\n
Passwords can be extracted in plan text from html source code of various configuration
\npages.<\/p>\n
Example:
\nhttp:\/\/IP Address\/TopAccess\/Administrator\/Setup\/ScanToFile\/List.htm<\/p>\n
<td nowrap””>
\nPassword
\n<input ID=”Password3″ type=”password” value=”Password1″ onfocus=”
\nif (this.disable) this.blur();” maxlength=”32″<\/p>\n
============================================================================<\/p>\n
3. Impact:<\/p>\n
Exploiting this allows an adversary to extract passwords that can be used to gain
\naccess to file servers, LDAP system, or other critical systems.<\/p>\n
============================================================================<\/p>\n
4. Affected Products:<\/p>\n
All e-Studio devices tested against have been found to be vulnerable as of
\nJuly 2011.<\/p>\n
Validation of specific firmware versions have not been conducted on a number
\nof systems. This is due to limited access to devices<\/p>\n
Confirmed devices:<\/p>\n
e-STUDIO305
\ne-STUDIO455
\ne-STUDIO600
\ne-STUDIO603<\/p>\n
Confirmed devices and firmware version:
\ne-STUDIO3510c\u00a0\u00a0\u00a0\u00a0 firmware version T380SY0J040
\ne-STUDIO281c\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 firmware version T410SY0T233<\/p>\n
============================================================================<\/p>\n
5. Solution:<\/p>\n
Contact vendor and request firmware upgrade to patch security issue.<\/p>\n
============================================================================<\/p>\n
6) Time Table:<\/p>\n
01\/29\/2011 Reported Vulnerability.<\/p>\n
10\/27\/2011 Publishes Advisory<\/p>\n
============================================================================<\/p>\n
7) Credits: Discovered by Deral Heiland PercX<\/p>\n
============================================================================<\/p>\n
8. Reference:
\nhttp:\/\/praeda.foofus.net
\nhttp:\/\/www.foofus.net\/?page_id=457<\/p>\n
============================================================================<\/p>\n
The Foofus.Net team is an assortment of security professionals located
\nthrough out the United States. http:\/\/www.foofus.net<\/p>\n
Follow percX on Twitter @Percent_X<\/p>\n
============================================================================<\/p>\n","protected":false},"excerpt":{"rendered":"
============================================================================ Foofus.net Security Advisory: foofus-20111026 ============================================================================ Title:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Toshiba EStudio Multifunction Printer Information Leakage Version:\u00a0\u00a0\u00a0\u00a0\u00a0 e-Studio series devices Vendor:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Toshiba Release Date: 01\/29\/2011 Update Date:\u00a0 10\/26\/2011 ============================================================================ 1. Summary: Toshiba e-Studio multifunction printer devices found to be vulnerable to an information leakage vulnerability. ============================================================================ 2. Description: Passwords can be extracted in plan text from html source […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":273,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-457","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/pages\/457","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=457"}],"version-history":[{"count":0,"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/pages\/457\/revisions"}],"up":[{"embeddable":true,"href":"http:\/\/h.foofus.net\/index.php?rest_route=\/wp\/v2\/pages\/273"}],"wp:attachment":[{"href":"http:\/\/h.foofus.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=457"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}