Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 32

Export CSV
CVE-2024-27141

Pre-authenticated Time-Based Blind XXE injection

Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 5.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2020 Ac and 39 more
CVE-2024-27143

Pre-authenticated Remote Code Execution

Toshiba printers use SNMP for configuration. Using the private community, it is possible to remotely execute commands as root on the remote printer. Using this vulnerability will allow any attacker to get a root access on a remote Toshiba printer. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27144

Pre-authenticated Remote Code Execution

The Toshiba printers provide several ways to upload files using the web interface without authentication. An attacker can overwrite any insecure files. And the Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27145

Multiple Post-authenticated Remote Code Execution

The Toshiba printers provide several ways to upload files using the admin web interface. An attacker can remotely compromise any Toshiba printer. An attacker can overwrite any insecure files. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27147

Local Privilege Escalation and Remote Code Execution using snmpd

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27148

Local Privilege Escalation and Remote Code Execution using insecure PATH

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27149

Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27150

Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27151

Local Privilege Escalation and Remote Code Execution using insecure permissions

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27152

Local Privilege Escalation and Remote Code Execution using insecure permissions

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27153

Local Privilege Escalation and Remote Code Execution

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27155

Local Privilege Escalation and Remote Code Execution using insecure permissions

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27160

Hardcoded password used to encrypt logs and use of weak cipher

All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27161

Hardcoded password used to encrypt files

all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the encrypted files using the hardcoded key. Insecure algorithm is used for the encryption. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27162

DOM-based XSS

Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 6.1 Medium EPSS 21.2% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more
CVE-2024-27165

Local Privilege Escalation

Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges. As for the affected products/models/versions, see the reference URL.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Toshibatec
Products
E-studio-2010-ac E-studio-2015-nc E-studio-2018 A and 47 more