CVE-2022-30421 Auth bypass in n/a
An improper authentication flaw in Toshiba Storage Security Software allows local attackers to bypass password checks and obtain sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-30421?
CVE-2022-30421 is a high-severity authentication bypass vulnerability in n/a, published on 31 Jan 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained via(local) password authentication module.
Weakness: CWE-287
Which versions are affected by CVE-2022-30421?
It affects 1 product.
Products include Toshiba Storage Security Software.
How do I fix CVE-2022-30421?
No fix has been published for CVE-2022-30421 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-30421 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-30421 exists.