What is the CVSS score of CVE-2012-1239?

CVE-2012-1239 has a CVSS 2.0 base score of 10.0 (Critical). CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 8.5%.

Is there a public PoC exploit available for CVE-2012-1239?

Yes, a public proof-of-concept exploit is available for CVE-2012-1239. Prioritise patching immediately. EPSS: 8.5%.

E Studio 167 With Network Printer Kit Firmware CVE-2012-1239

CRITICAL

Permissions, Privileges, and Access Controls (CWE-264)

2012-04-06 vultures@jpcert.or.jp

10.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Apr 06, 2012 - 19:55 cve.org

CRITICAL 10.0

DescriptionCVE.org

The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors.

AnalysisAI

The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors. Affected products include: Toshibatec E-Studio-167 With Network Printer Kit Firmware, Toshibatec E-Studio-181 With Network Printer Kit Firmware, Toshibatec E-Studio-182 With Network Printer Kit Firmware, Toshibatec E-Studio-207 With Network Printer Kit Firmware, Toshibatec E-Studio-232 Firmware. Version information: through 302.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.