CVE-2024-27160

Hardcoded password used to encrypt logs and use of weak cipher

Published Jun 14, 2024 CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Description
All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point.
https://www.toshibatec.com/contacts/products/
As for the affected products/models/versions, see the reference URL.

Remediation

Vendor Solution

This issue is fixed in the version released on June 14, 2024 and all later versions.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-24401 All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL.
History
Type Values Removed Values Added
First Time appeared Toshibatec
Toshibatec e-studio-2010-ac
Toshibatec e-studio-2015-nc
Toshibatec e-studio-2018 A
Toshibatec e-studio-2020 Ac
Toshibatec e-studio-2021 Ac
Toshibatec e-studio-2110-ac
Toshibatec e-studio-2510-ac
Toshibatec e-studio-2515-nc
Toshibatec e-studio-2518 A
Toshibatec e-studio-2520 Nc
Toshibatec e-studio-2521 Ac
Toshibatec e-studio-2525 Ac
Toshibatec e-studio-2528-a
Toshibatec e-studio-2610-ac
Toshibatec e-studio-2615-nc
Toshibatec e-studio-2618 A
Toshibatec e-studio-3015-nc
Toshibatec e-studio-3018 A
Toshibatec e-studio-3025 Ac
Toshibatec e-studio-3028-a
Toshibatec e-studio-3115-nc
Toshibatec e-studio-3118 A
Toshibatec e-studio-3118 Ag
Toshibatec e-studio-330-ac
Toshibatec e-studio-3515-nc
Toshibatec e-studio-3525 Ac
Toshibatec e-studio-3525 Acg
Toshibatec e-studio-3528-a
Toshibatec e-studio-3528-ag
Toshibatec e-studio-3615-nc
Toshibatec e-studio-400-ac
Toshibatec e-studio-4515 Ac
Toshibatec e-studio-4525 Ac
Toshibatec e-studio-4528-a
Toshibatec e-studio-4528-ag
Toshibatec e-studio-4615 Ac
Toshibatec e-studio-5015 Ac
Toshibatec e-studio-5115 Ac
Toshibatec e-studio-5525 Ac
Toshibatec e-studio-5525 Acg
Toshibatec e-studio-5528-a
Toshibatec e-studio-6525 Ac
Toshibatec e-studio-6525 Acg
Toshibatec e-studio-6526-ac
Toshibatec e-studio-6527-ac
Toshibatec e-studio-6528-a
Toshibatec e-studio-6529-a
Toshibatec e-studio-7527-ac
Toshibatec e-studio-7529-a
Toshibatec e-studio-9029-a
CPEs cpe:2.3:h:toshibatec:e-studio-2010-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2015-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2018_a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2020_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2021_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2110-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2510-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2515-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2518_a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2520_nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2521_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2610-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2615-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-2618_a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3015-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3018_a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3025_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3028-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3115-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3118_a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3118_ag:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-330-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3515-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3525_acg:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3528-ag:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-3615-nc:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-400-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-4515_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-4525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-4528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-4528-ag:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-4615_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-5015_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-5115_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-5525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-5525_acg:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-5528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6525_ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6525_acg:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6526-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6527-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6528-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-6529-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-7527-ac:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-7529-a:-:*:*:*:*:*:*:*
cpe:2.3:h:toshibatec:e-studio-9029-a:-:*:*:*:*:*:*:*
Vendors & Products Toshibatec
Toshibatec e-studio-2010-ac
Toshibatec e-studio-2015-nc
Toshibatec e-studio-2018 A
Toshibatec e-studio-2020 Ac
Toshibatec e-studio-2021 Ac
Toshibatec e-studio-2110-ac
Toshibatec e-studio-2510-ac
Toshibatec e-studio-2515-nc
Toshibatec e-studio-2518 A
Toshibatec e-studio-2520 Nc
Toshibatec e-studio-2521 Ac
Toshibatec e-studio-2525 Ac
Toshibatec e-studio-2528-a
Toshibatec e-studio-2610-ac
Toshibatec e-studio-2615-nc
Toshibatec e-studio-2618 A
Toshibatec e-studio-3015-nc
Toshibatec e-studio-3018 A
Toshibatec e-studio-3025 Ac
Toshibatec e-studio-3028-a
Toshibatec e-studio-3115-nc
Toshibatec e-studio-3118 A
Toshibatec e-studio-3118 Ag
Toshibatec e-studio-330-ac
Toshibatec e-studio-3515-nc
Toshibatec e-studio-3525 Ac
Toshibatec e-studio-3525 Acg
Toshibatec e-studio-3528-a
Toshibatec e-studio-3528-ag
Toshibatec e-studio-3615-nc
Toshibatec e-studio-400-ac
Toshibatec e-studio-4515 Ac
Toshibatec e-studio-4525 Ac
Toshibatec e-studio-4528-a
Toshibatec e-studio-4528-ag
Toshibatec e-studio-4615 Ac
Toshibatec e-studio-5015 Ac
Toshibatec e-studio-5115 Ac
Toshibatec e-studio-5525 Ac
Toshibatec e-studio-5525 Acg
Toshibatec e-studio-5528-a
Toshibatec e-studio-6525 Ac
Toshibatec e-studio-6525 Acg
Toshibatec e-studio-6526-ac
Toshibatec e-studio-6527-ac
Toshibatec e-studio-6528-a
Toshibatec e-studio-6529-a
Toshibatec e-studio-7527-ac
Toshibatec e-studio-7529-a
Toshibatec e-studio-9029-a
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Toshiba
Published
Updated
Feb 13, 2025, 5:46 PM
Reserved
Feb 21, 2024, 2:11 AM
Status
Deferred
Published
Jun 14, 2024, 4:15 AM
Modified
Jun 17, 2026, 7:19 AM