Incorrect Permission Assignment Privilege Escalation Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Toshiba Tec Corporation | Toshiba Tec e-Studio multi-function peripheral (MFP) | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
This issue is fixed in the version released on June 14, 2024 and all later versions.
Vendor Workaround
When connecting the MFPs and printers with an outer network such as the Internet, only operate it in a network environment protected by a firewall, etc. to prevent information from being leaked due to incorrect settings or avoid illegal access by unauthorized users.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-32084 | Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page and elevate its privileges to root. As for the affected products/models/versions, see the reference URL. |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.322% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.
No data.
Execution with Unnecessary Privileges