FlashAirTM SDHC Memory Card (SD-WE Series ) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series ) V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors.
Weakness
The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Flashair | Toshiba | * | 2.00.04 (including) |
| Flashair | Toshiba | * | 3.00.02 (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/127.html
- https://cwe.mitre.org/data/definitions/143.html
- https://cwe.mitre.org/data/definitions/144.html
- https://cwe.mitre.org/data/definitions/668.html
- https://cwe.mitre.org/data/definitions/87.html
References
- http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000090.html
- http://www.toshiba-personalstorage.net/news/20170516a.htm
- https://jvn.jp/en/jp/JVN46372675/index.html
- http://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000090.html
- http://www.toshiba-personalstorage.net/news/20170516a.htm
- https://jvn.jp/en/jp/JVN46372675/index.html