PT-2023-13008 · Toshiba · Toshiba Storage Security

Donghyun Kim + 3 · Publicado 2023-01-31 · Atualizado 2025-03-27 · CVE-2022-30421

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Toshiba Storage Security Software version 1.2.0.7413

Description The issue is related to an Improper Authentication vulnerability that allows sensitive information to be obtained via the local password authentication module.

Recommendations For Toshiba Storage Security Software version 1.2.0.7413, consider disabling the local password authentication module until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2022-30421

GHSA-PX7R-44VJ-8H7M

Produtos afetados

Toshiba Storage Security

Referências · 8

• 🔥 https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-px7r-44vj-8h7m · Exploit
• https://t.me/cibsecurity/57205 · Publicação no Telegram
• http://global.gmarket.co.kr/item?goodscode=741668527 · Nota
• http://global.11st.co.kr/glb/product/SellerProductDetail.tmall?method=getSellerProductDetail&prdNo=1398327038 · Nota
• https://osv.dev/vulnerability/CVE-2022-30421 · Aviso do Fabricante
• https://t.me/cvenotify/116593 · Publicação no Telegram
• https://ebay.com/itm/274246695791 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-30421 · Nota de Segurança