Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 29

CVE-2024-27150

Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27152

Local Privilege Escalation and Remote Code Execution using insecure permissions

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27155

Local Privilege Escalation and Remote Code Execution using insecure permissions

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27162

DOM-based XSS

Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 6.1 Medium EPSS 21.2% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27169

Lack of authentication

Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27141

Pre-authenticated Time-Based Blind XXE injection

Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 5.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2020 Ac and 39 more
CVE-2024-27147

Local Privilege Escalation and Remote Code Execution using snmpd

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27148

Local Privilege Escalation and Remote Code Execution using insecure PATH

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27149

Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27151

Local Privilege Escalation and Remote Code Execution using insecure permissions

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27153

Local Privilege Escalation and Remote Code Execution

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27167

Insecure permissions

Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject a malicious Sendmail configuration file. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27174

insecure upload

Remote Command program allows an attacker to get Remote Code Execution. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27178

Remote Code Execution

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more