PT-2023-13008 · Toshiba · Toshiba Storage Security

Donghyun Kim + 3 · Published 2023-01-31 · Updated 2025-03-27 · CVE-2022-30421

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Toshiba Storage Security Software version 1.2.0.7413

Description The issue is related to an Improper Authentication vulnerability that allows sensitive information to be obtained via the local password authentication module.

Recommendations For Toshiba Storage Security Software version 1.2.0.7413, consider disabling the local password authentication module until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2022-30421

GHSA-PX7R-44VJ-8H7M

Affected Products

Toshiba Storage Security

References · 8

• 🔥 https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-px7r-44vj-8h7m · Exploit
• https://osv.dev/vulnerability/CVE-2022-30421 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30421 · Security Note
• https://t.me/cibsecurity/57205 · Telegram Post
• http://global.gmarket.co.kr/item?goodscode=741668527 · Note
• http://global.11st.co.kr/glb/product/SellerProductDetail.tmall?method=getSellerProductDetail&prdNo=1398327038 · Note
• https://t.me/cvenotify/116593 · Telegram Post
• https://ebay.com/itm/274246695791 · Note