Toshiba Tec Corporation Toshiba Tec E-Studio Multi-Function Peripheral (Mfp)
43 CVEs affecting Toshiba Tec Corporation Toshiba Tec E-Studio Multi-Function Peripheral (Mfp). Latest disclosed: 2024-06-14. Critical: 6, High: 23.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-27174 | Critical | 9.8 | 2024-06-14 | Remote Command program allows an attacker to get Remote Code Execution. This vulnerability can be executed in combination with other vulnerabilities and diffi… |
CVE-2024-27173 | Critical | 9.8 | 2024-06-14 | Remote Command program allows an attacker to get Remote Code Execution by overwriting existing Python files containing executable code. This vulnerability can… |
CVE-2024-27172 | Critical | 9.8 | 2024-06-14 | Remote Command program allows an attacker to get Remote Code Execution. As for the affected products/models/versions, see the reference URL. |
CVE-2024-27145 | Critical | 9.8 | 2024-06-14 | The Toshiba printers provide several ways to upload files using the admin web interface. An attacker can remotely compromise any Toshiba printer. An attacker c… |
CVE-2024-27144 | Critical | 9.8 | 2024-06-14 | The Toshiba printers provide several ways to upload files using the web interface without authentication. An attacker can overwrite any insecure files. And the… |
CVE-2024-27143 | Critical | 9.8 | 2024-06-14 | Toshiba printers use SNMP for configuration. Using the private community, it is possible to remotely execute commands as root on the remote printer. Using this… |
CVE-2024-3497 | High | 8.8 | 2024-06-14 | Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the af… |
CVE-2024-3496 | High | 8.8 | 2024-06-14 | Attackers can bypass the web login authentication process to gain access to the printer's system information and upload malicious drivers to the printer. As fo… |
CVE-2024-27169 | High | 8.4 | 2024-06-14 | Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative… |
CVE-2024-3498 | High | 7.8 | 2024-06-14 | Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page and elevate its privileges to root. As fo… |
CVE-2024-27165 | High | 7.8 | 2024-06-14 | Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges. As for the affected… |
CVE-2024-27155 | High | 7.7 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be… |
CVE-2024-27171 | High | 7.4 | 2024-06-14 | A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code Execution. As for the affected products… |
CVE-2024-27170 | High | 7.4 | 2024-06-14 | It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file. Then, it is possible to get a full access with W… |
CVE-2024-27167 | High | 7.4 | 2024-06-14 | Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject a malicious Sendmai… |
CVE-2024-27166 | High | 7.4 | 2024-06-14 | Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/vers… |
CVE-2024-27158 | High | 7.4 | 2024-06-14 | All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL. |
CVE-2024-27153 | High | 7.4 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected… |
CVE-2024-27152 | High | 7.4 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected… |
CVE-2024-27151 | High | 7.4 | 2024-06-14 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be… |