CVE-2024-27142

🗓️ 14 Jun 2024 02:28:02Reported by ToshibaType

cve🔗 web.nvd.nist.gov👁 74 Views🌐 WEB

Toshiba printers XML API endpoint vulnerabilit

Reporter	Title	Published	Views	Family All 9
CNNVD	Toshiba e-STUDIO Security Vulnerability	14 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-27142 Pre-authenticated XXE injection	14 Jun 202402:28	–	cvelist
EUVD	EUVD-2024-24383	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs	17 Jun 202406:21	–	jvn
NVD	CVE-2024-27142	14 Jun 202403:15	–	nvd
OpenVAS	Toshiba Printers Multiple Vulnerabilities (May 2024)	8 Jul 202400:00	–	openvas
Packet Storm	Toshiba Multi-Function Printers 40 Vulnerabilities	4 Jul 202400:00	–	packetstorm
Positive Technologies	PT-2024-21673 · Toshiba · Toshiba Printers	14 Jun 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-27142 Pre-authenticated XXE injection	14 Jun 202402:28	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Toshiba Tec e-Studio multi-function peripheral (MFP)",
    "vendor": "Toshiba Tec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "see the reference URL"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU97136265/index.html
toshibatec	www.toshibatec.com/information/20240531_01.html
seclists	www.seclists.org/fulldisclosure/2024/Jul/1
toshibatec	www.toshibatec.com/information/pdf/information20240531_01.pdf

Parameter	Position	Path	Description	CWE
XML payload	request body	contentwebserver	Pre-authenticated XXE in XML parser used by /contentwebserver can be exploited to DoS/exfiltrate via Billion Laughs payload	CWE-776
/./../../../../../home/SYSROM_SRC/build/common/bin/networkservice/ldapserver	path	contentwebserver/upload	Upload endpoint vulnerability enabling arbitrary file write via crafted multipart/form-data to /contentwebserver/upload	CWE-776
DeviceInformationModel	path	contentwebserver/upload	Upload endpoint vulnerability enabling arbitrary file write via crafted multipart/form-data to /contentwebserver/upload	CWE-776
Session	request body	tapy/server/appmgmt/applistDeployed	Pre-authenticated remote code execution via crafted request to admin path exposed through reverse proxy	CWE-776
csrfpId	request body	tapy/server/appmgmt/applistDeployed	Pre-authenticated remote code execution via crafted request to admin path exposed through reverse proxy	CWE-776
UploadFrame.html	path	efiling/UploadFrame.html	Insecure file upload forms allowing arbitrary file writes to printer file system	CWE-799
UploadArchive.html	path	efiling/UploadFrame.html	Insecure file upload forms allowing arbitrary file writes to printer file system	CWE-799
UploadFrame.html	path	efiling/UploadFrame.html	Insecure file upload forms allowing arbitrary file writes to printer file system	CWE-799
UploadArchiveProgress.html	path	efiling/UploadFrame.html	Insecure file upload forms allowing arbitrary file writes to printer file system	CWE-799
UpLoadArchiveClose.html	path	efiling/UploadFrame.html	Insecure file upload forms allowing arbitrary file writes to printer file system	CWE-799

15 Apr 2026 00:35Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.9

EPSS0.00075

SSVC

CWE-776