Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-27125 State: PUBLISHED Published: 2024-09-06T16:27:17.757Z Last Updated: 2024-09-06T17:33:18.291Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: QNAP Systems Inc. Products: Helpdesk Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following version: Helpdesk 3.3.1 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-29
CVE ID: CVE-2024-27126 State: PUBLISHED Published: 2024-09-06T16:26:37.078Z Last Updated: 2024-09-06T17:50:39.130Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: QNAP Systems Inc. Products: Notes Station 3 Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: Notes Station 3 3.9.6 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-21
CVE ID: CVE-2024-27127 State: PUBLISHED Published: 2024-05-21T16:08:29.155Z Last Updated: 2024-08-02T00:27:59.797Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-415 Description: A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute arbitrary code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contain
QuTS hero h5.1.7.2770 build 20240520 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-23
CVE ID: CVE-2024-27128 State: PUBLISHED Published: 2024-05-21T16:08:34.365Z Last Updated: 2024-08-02T00:27:59.337Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-120, CWE-121 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later Additional Analyst Notes: - CISA ADP Vul
.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-23
CVE ID: CVE-2024-27129 State: PUBLISHED Published: 2024-05-21T16:08:40.115Z Last Updated: 2024-08-02T00:27:59.066Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-120, CWE-121 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later Additional Analyst Notes: - CISA ADP Vul
CVE ID: CVE-2024-27130 State: PUBLISHED Published: 2024-05-21T16:08:46.881Z Last Updated: 2024-08-02T00:27:59.262Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-120, CWE-121 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
240520 and later QuTS hero h5.1.7.2770 build 20240520 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-23
CVE ID: CVE-2024-27132 State: PUBLISHED Published: 2024-02-23T21:58:59.869Z Last Updated: 2024-08-14T15:28:19.332Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Problem Types: CWE-79 Description: Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. This issue leads to a client-side RCE when running an untrusted recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over template variables. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.jfrog.com/vulnerabilities/mlflow-untrusted-recipe-xss-jfsa-2024-000631930/ - https://github.com/mlflow/mlflow/pull/10873
CVE ID: CVE-2024-27133 State: PUBLISHED Published: 2024-02-23T22:00:33.124Z Last Updated: 2024-08-22T18:01:49.002Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Problem Types: CWE-79 Description: Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.jfrog.com/vulnerabilities/mlflow-untrusted-dataset-xss-jfsa-2024-000631932/ - https://github.com/mlflow/mlflo
//research.jfrog.com/vulnerabilities/mlflow-untrusted-dataset-xss-jfsa-2024-000631932/ - https://github.com/mlflow/mlflow/pull/10893
CVE ID: CVE-2024-27134 State: PUBLISHED Published: 2024-11-25T13:48:05.117Z Last Updated: 2024-11-25T14:23:59.324Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Problem Types: CWE-367, CWE-276 Description: Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mlflow/mlflow/pull/10874
CVE ID: CVE-2024-27135 State: PUBLISHED Published: 2024-03-12T18:18:06.720Z Last Updated: 2025-02-13T17:41:17.703Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Apache Software Foundation Products: Apache Pulsar Problem Types: CWE-913, CWE-20 Description: Improper input validation in the Pulsar Function Worker allows a malicious authenticated user to execute arbitrary Java code on the Pulsar Function worker, outside of the sandboxes designated for running user-provided functions. This vulnerability also applies to the Pulsar Broker when it is configured with "functionsWorkerEnabled=true". This issue affects Apache Pulsar versions from 2.4.0 to 2.10.5, from 2
is configured with "functionsWorkerEnabled=true". This issue affects Apache Pulsar versions from 2.4.0 to 2.10.5, from 2.11.0 to 2.11.3, from 3.0.0 to 3.0.2, from 3.1.0 to 3.1.2, and 3.2.0. 2.10 Pulsar Function Worker users should upgrade to at least 2.10.6. 2.11 Pulsar Function Worker users should upgrade to at least 2.11.4. 3.0 Pulsar Function Worker users should upgrade to at least 3.0.3. 3.1 Pulsar Function Worker users should upgrade to at least 3.1.3. 3.2 Pulsar Function Worker users should upgrade to at least 3.2.1. Users operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions. Additional Analyst Notes: - CISA ADP Vulnrich
e should upgrade to the aforementioned patched versions or newer versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/dh8nj2vmb2br6thjltq74lk9jxkz62wn - https://pulsar.apache.org/security/CVE-2024-27135/ - http://www.openwall.com/lists/oss-security/2024/03/12/9
CVE ID: CVE-2024-27136 State: PUBLISHED Published: 2024-06-24T07:44:30.732Z Last Updated: 2025-03-20T18:03:19.410Z Vendors: Apache Software Foundation Products: Apache JSPWiki Problem Types: CWE-79 Description: XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/gfms8gbncqqkj52p861b8fnsypwsl1d5 - https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2024-27136
CVE ID: CVE-2024-27137 State: PUBLISHED Published: 2025-02-04T10:19:44.109Z Last Updated: 2025-02-15T00:10:33.257Z Vendors: Apache Software Foundation Products: Apache Cassandra Problem Types: Unrestricted deserialization of JMX authentication credentials Description: In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorized operations. This is same vulnerability that CVE-2020-13946 was issue
o access the JMX interface and perform unauthorized operations. This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10. This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11. Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/jsk87d9yv8r204mgqpz1qxtp5wcrpysm
CVE ID: CVE-2024-27138 State: PUBLISHED Published: 2024-03-01T15:41:12.677Z Last Updated: 2025-02-13T17:41:18.332Z Vendors: Apache Software Foundation Products: Apache Archiva Problem Types: CWE-863 Description: ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting to disable user registration, however this restriction can be bypassed. As Apache Archiva has been retired, we do not expect to release a version of Apache Archiva that fixes this issue. You are recommended to look into migrating to a different solution, or isolate your instance from any untrusted users. NOTE: This vulnerability only affects products that are no longe
ion, or isolate your instance from any untrusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/070qcpclcb3sqk1hn8j5lvzohp30k1m2 - http://www.openwall.com/lists/oss-security/2024/03/01/4
CVE ID: CVE-2024-27139 State: PUBLISHED Published: 2024-03-01T15:40:49.893Z Last Updated: 2025-04-16T20:47:27.623Z Vendors: Apache Software Foundation Products: Apache Archiva Problem Types: CWE-863 Description: ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially leading to account takeover. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only aff
ecommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/qr8b7r86p1hkn0dc0q827s981kf1bgd8 - http://www.openwall.com/lists/oss-security/2024/03/01/3
CVE ID: CVE-2024-27140 State: PUBLISHED Published: 2024-03-01T15:40:08.456Z Last Updated: 2025-02-13T17:41:19.631Z Vendors: Apache Software Foundation Products: Apache Archiva Problem Types: CWE-79 Description: ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Archiva. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. Alternatively, you could configure a HTTP proxy in front of your Archiva instance to only forward requests
usted users. Alternatively, you could configure a HTTP proxy in front of your Archiva instance to only forward requests that do not have malicious characters in the URL. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/xrn6nt904ozh3jym60c3f5hj2fb75pjy - http://www.openwall.com/lists/oss-security/2024/03/01/2
CVE ID: CVE-2024-27141 State: PUBLISHED Published: 2024-06-14T02:21:24.696Z Last Updated: 2025-02-13T17:41:20.670Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-776 Description: Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers by sending a HTTP request without authentication. An attacker can exploit the XXE to retrieve information. As for the affected produ
HTTP request without authentication. An attacker can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27142 State: PUBLISHED Published: 2024-06-14T02:28:02.965Z Last Updated: 2025-02-13T17:41:21.398Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-776 Description: Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An attacker can DoS the printers. An attacker can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL. Addit
can exploit the XXE to retrieve information. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27143 State: PUBLISHED Published: 2024-06-14T02:29:54.997Z Last Updated: 2025-02-13T17:41:22.048Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-250 Description: Toshiba printers use SNMP for configuration. Using the private community, it is possible to remotely execute commands as root on the remote printer. Using this vulnerability will allow any attacker to get a root access on a remote Toshiba printer. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score fo
rability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://secli
toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27144 State: PUBLISHED Published: 2024-06-14T02:31:58.131Z Last Updated: 2025-02-13T17:41:22.725Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-22, CWE-276 Description: The Toshiba printers provide several ways to upload files using the web interface without authentication. An attacker can overwrite any insecure files. And the Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote
can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01
otes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27145 State: PUBLISHED Published: 2024-06-14T02:33:34.694Z Last Updated: 2025-02-13T17:41:23.443Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-22 Description: The Toshiba printers provide several ways to upload files using the admin web interface. An attacker can remotely compromise any Toshiba printer. An attacker can overwrite any insecure files. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed
abilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27146 State: PUBLISHED Published: 2024-06-14T02:35:33.638Z Last Updated: 2025-02-13T17:41:24.073Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-250 Description: The Toshiba printers do not implement privileges separation. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU9713
0240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27147 State: PUBLISHED Published: 2024-06-14T02:44:34.508Z Last Updated: 2025-02-13T17:41:24.694Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-250 Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.co
CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27148 State: PUBLISHED Published: 2024-06-14T02:46:20.549Z Last Updated: 2025-02-13T17:41:25.370Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.co
CVE ID: CVE-2024-27149 State: PUBLISHED Published: 2024-06-14T02:50:28.457Z Last Updated: 2025-02-13T17:41:26.127Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.co