Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-27150 State: PUBLISHED Published: 2024-06-14T02:52:19.815Z Last Updated: 2025-02-13T17:41:27.265Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.co
CVE ID: CVE-2024-27151 State: PUBLISHED Published: 2024-06-14T02:54:05.707Z Last Updated: 2025-02-13T17:41:28.002Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
rsions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27152 State: PUBLISHED Published: 2024-06-14T02:55:47.014Z Last Updated: 2025-02-13T17:46:00.252Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.co
CVE ID: CVE-2024-27153 State: PUBLISHED Published: 2024-06-14T02:57:28.015Z Last Updated: 2025-02-13T17:46:01.169Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.co
CVE ID: CVE-2024-27154 State: PUBLISHED Published: 2024-06-14T02:58:55.751Z Last Updated: 2025-02-13T17:46:01.900Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-532 Description: Passwords are stored in clear-text logs. An attacker can retrieve passwords. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp
om/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27155 State: PUBLISHED Published: 2024-06-14T03:18:25.525Z Last Updated: 2025-02-13T17:46:02.485Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
CVE ID: CVE-2024-27156 State: PUBLISHED Published: 2024-06-14T03:20:49.798Z Last Updated: 2025-02-13T17:46:03.200Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-532 Description: The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:
see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27157 State: PUBLISHED Published: 2024-06-14T03:22:31.415Z Last Updated: 2025-02-13T17:46:03.782Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-532 Description: The sessions are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27158 State: PUBLISHED Published: 2024-06-14T03:24:23.225Z Last Updated: 2025-02-13T17:46:04.410Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-1392 Description: All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU9
n/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27159 State: PUBLISHED Published: 2024-06-14T03:29:15.059Z Last Updated: 2025-02-13T17:46:05.095Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-798 Description: All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this v
cute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27160 State: PUBLISHED Published: 2024-06-14T03:33:50.028Z Last Updated: 2025-02-13T17:46:05.664Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-798 Description: All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this v
CVE ID: CVE-2024-27161 State: PUBLISHED Published: 2024-06-14T03:37:14.751Z Last Updated: 2025-02-13T17:46:06.254Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-798 Description: all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the encrypted files using the hardcoded key. Insecure algorithm is used for the encryption. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the
other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27162 State: PUBLISHED Published: 2024-06-14T03:39:04.876Z Last Updated: 2025-02-13T17:46:06.902Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-79 Description: Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Conta
products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27163 State: PUBLISHED Published: 2024-06-14T03:40:44.063Z Last Updated: 2025-02-13T17:46:07.502Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-319 Description: Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests to the internal API. An attacker stealing the cookie of an admin or abusing a XSS vulnerability can recover this password in clear-text and compromise the printer. This vulnerability can be executed in combination with other vulnerabilities a
in clear-text and compromise the printer. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://
atec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27164 State: PUBLISHED Published: 2024-06-14T03:42:00.905Z Last Updated: 2025-02-13T17:46:08.158Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-259 Description: Toshiba printers contain hardcoded credentials. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html
- https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27165 State: PUBLISHED Published: 2024-06-14T03:43:22.266Z Last Updated: 2025-02-13T17:46:08.720Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-272 Description: Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.co
CVE ID: CVE-2024-27166 State: PUBLISHED Published: 2024-06-14T03:48:46.097Z Last Updated: 2025-02-13T17:46:09.261Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276, CWE-319, CWE-256 Description: Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/i
Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27167 State: PUBLISHED Published: 2024-06-14T03:52:38.112Z Last Updated: 2025-02-13T17:46:09.867Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject a malicious Sendmail configuration file. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/202
nalyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27168 State: PUBLISHED Published: 2024-06-14T03:53:58.804Z Last Updated: 2025-02-13T17:46:10.504Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-798 Description: It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow attackers to bypass authentication and reach administrative interfaces. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/inform
itional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27169 State: PUBLISHED Published: 2024-06-14T03:55:04.544Z Last Updated: 2025-02-13T17:46:11.202Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-306 Description: Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27170 State: PUBLISHED Published: 2024-06-14T03:56:21.336Z Last Updated: 2025-02-13T17:46:11.931Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-798 Description: It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file. Then, it is possible to get a full access with WebDAV to the printer. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/202
CVE ID: CVE-2024-27171 State: PUBLISHED Published: 2024-06-14T03:59:24.365Z Last Updated: 2025-02-13T17:46:12.516Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-276 Description: A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code Execution. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/informa
am Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27172 State: PUBLISHED Published: 2024-06-14T04:00:40.846Z Last Updated: 2025-02-13T17:46:13.239Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-78 Description: Remote Command program allows an attacker to get Remote Code Execution. As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/
nformation/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27173 State: PUBLISHED Published: 2024-06-14T04:01:54.119Z Last Updated: 2025-02-13T17:46:13.862Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-22 Description: Remote Command program allows an attacker to get Remote Code Execution by overwriting existing Python files containing executable code. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail o
core for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1
CVE ID: CVE-2024-27174 State: PUBLISHED Published: 2024-06-14T04:03:18.120Z Last Updated: 2025-02-13T17:46:14.401Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Toshiba Tec Corporation Products: Toshiba Tec e-Studio multi-function peripheral (MFP) Problem Types: CWE-22 Description: Remote Command program allows an attacker to get Remote Code Execution. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact
in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point. https://www.toshibatec.com/contacts/products/ As for the affected products/models/versions, see the reference URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.toshibatec.com/information/20240531_01.html - https://www.toshibatec.com/information/pdf/information20240531_01.pdf - https://jvn.jp/en/vu/JVNVU97136265/index.html - http://seclists.org/fulldisclosure/2024/Jul/1