CVE-2012-1239
Last modified
CVE-2012-1239 is a vulnerability of currently unknown severity. The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors.. EPSS estimates a 4.72% chance of exploitation in the next 30 days.
Description
The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Toshibatec | E-Studio-167 With Network Printer Kit Firmware | t282cn0j421 |
| Toshibatec | E-Studio-181 With Network Printer Kit Firmware | t282cn0j421 |
| Toshibatec | E-Studio-182 With Network Printer Kit Firmware | t282cn0j421 |
| Toshibatec | E-Studio-207 With Network Printer Kit Firmware | t282cn0j421 |
| Toshibatec | E-Studio-232 Firmware | t377sy0j354 |
| Toshibatec | E-Studio-2330c Firmware | t450sy0j302 |
| Toshibatec | E-Studio-2500c Firmware | t380sy0j354 |
| Toshibatec | E-Studio-255 Firmware | t470sy0j302 |
| Toshibatec | E-Studio-255p Firmware | t470sy0j302 |
| Toshibatec | E-Studio-281c Firmware | t410sy0j354 |
| Toshibatec | E-Studio-282 Firmware | t377sy0j354 |
| Toshibatec | E-Studio-2830c Firmware | t450sy0j302 |
| Toshibatec | E-Studio-3500c Firmware | t380sy0j354 |
| Toshibatec | E-Studio-3510c Firmware | t380sy0j354 |
| Toshibatec | E-Studio-351c Firmware | t410sy0j354 |
| Toshibatec | E-Studio-352 Firmware | t364sy0j354 |
| Toshibatec | E-Studio-3520c Firmware | t450sy0j302 |
| Toshibatec | E-Studio-355 Firmware | t470sy0j302 |
| Toshibatec | E-Studio-451c Firmware | t410sy0j354 |
| Toshibatec | E-Studio-452 Firmware | t364sy0j354 |
| Toshibatec | E-Studio-4520c Firmware | t450sy0j302 |
| Toshibatec | E-Studio-455 Firmware | t470sy0j302 |
| Toshibatec | E-Studio-5520c Firmware | t430sy0j302 |
| Toshibatec | E-Studio-600 Firmware | t390sy0j354 |
| Toshibatec | E-Studio-6520c Firmware | t430sy0j302 |
| Toshibatec | E-Studio-6530c Firmware | t430sy0j302 |
| Toshibatec | E-Studio-655 Firmware | t100sy0j302 |
| Toshibatec | E-Studio-720 Firmware | t390sy0j354 |
| Toshibatec | E-Studio-755 Firmware | t100sy0j302 |
| Toshibatec | E-Studio-850 Firmware | t390sy0j354 |
| Toshibatec | E-Studio-855 Firmware | t100sy0j302 |
| Toshibatec | E-Studio-Tf-182 With Network Printer Kit Firmware | t282cn0j421 |
| Toshibatec | E-Studio-167 With Network Printer Kit | All versions |
| Toshibatec | E-Studio-181 With Network Printer Kit | All versions |
| Toshibatec | E-Studio-182 With Network Printer Kit | All versions |
| Toshibatec | E-Studio-207 With Network Printer Kit | All versions |
| Toshibatec | E-Studio-232 | All versions |
| Toshibatec | E-Studio-2330c | All versions |
| Toshibatec | E-Studio-2500c | All versions |
| Toshibatec | E-Studio-255 | All versions |
| Toshibatec | E-Studio-255p | All versions |
| Toshibatec | E-Studio-281c | All versions |
| Toshibatec | E-Studio-282 | All versions |
| Toshibatec | E-Studio-2830c | All versions |
| Toshibatec | E-Studio-3500c | All versions |
| Toshibatec | E-Studio-3510c | All versions |
| Toshibatec | E-Studio-351c | All versions |
| Toshibatec | E-Studio-352 | All versions |
| Toshibatec | E-Studio-3520c | All versions |
| Toshibatec | E-Studio-355 | All versions |
Showing 50 of 64 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-1239?
How severe is CVE-2012-1239?
How do I fix CVE-2012-1239?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-1227Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2012-1234SQL injection vulnerability in Advantech/BroadWin WebAccess …
- CVE-2012-1235Cross-site request forgery (CSRF) vulnerability in Advantech…
- CVE-2012-1236Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2012-1237Cross-site request forgery (CSRF) vulnerability in SENCHA SN…
- CVE-2012-1238Session fixation vulnerability in SENCHA SNS before 1.0.2 al…
- CVE-2012-1240Cross-site scripting (XSS) vulnerability in the RECRUIT Doko…
- CVE-2012-1241GRScript18.dll before 1.2.2.0 in ActiveScriptRuby (ASR) befo…
- CVE-2012-1242Untrusted search path vulnerability in JustSystems Ichitaro …
- CVE-2012-1243The TwitRocker2 application before 1.0.23 for Android does n…
- CVE-2012-1244The NTT DOCOMO sp mode mail application 5400 and earlier for…
- CVE-2012-1245Cross-site scripting (XSS) vulnerability in the cleanup_urls…
Are you affected by CVE-2012-1239?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
