CVE-2024-27143

🗓️ 14 Jun 2024 02:29:54Reported by ToshibaType

cve🔗 web.nvd.nist.gov👁 62 Views🌐 WEB

Toshiba printers SNMP remote root acces

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-27143	30 May 202614:07	–	circl
CNNVD	Toshiba e-STUDIO Security Vulnerability	14 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-27143 Pre-authenticated Remote Code Execution	14 Jun 202402:29	–	cvelist
EUVD	EUVD-2024-24384	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs	17 Jun 202406:21	–	jvn
NVD	CVE-2024-27143	14 Jun 202403:15	–	nvd
OpenVAS	Toshiba Printers Multiple Vulnerabilities (May 2024)	8 Jul 202400:00	–	openvas
Packet Storm	Toshiba Multi-Function Printers 40 Vulnerabilities	4 Jul 202400:00	–	packetstorm
Positive Technologies	PT-2024-21674	13 Jun 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-27143 Pre-authenticated Remote Code Execution	14 Jun 202402:29	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Toshiba Tec e-Studio multi-function peripheral (MFP)",
    "vendor": "Toshiba Tec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "see the reference URL"
      }
    ]
  }
]

Source	Link
toshibatec	www.toshibatec.com/information/20240531_01.html
seclists	www.seclists.org/fulldisclosure/2024/Jul/1
toshibatec	www.toshibatec.com/information/pdf/information20240531_01.pdf
jvn	www.jvn.jp/en/vu/JVNVU97136265/index.html

Parameter	Position	Path	Description	CWE
csrfpId	request body	contentwebserver	Pre-authenticated Remote Code Execution as root via XXE in contentwebserver endpoint.	CWE-250
<XML payload with XXE>	request body	contentwebserver	Pre-authenticated Remote Code Execution as root via XXE in contentwebserver endpoint.	CWE-250
name	upload data	contentwebserver/upload	Remote code execution / arbitrary file write via insecure upload API; traversal in the file name rewrites files on the printer.	CWE-250
Content-Type	upload data	contentwebserver/upload	Remote code execution / arbitrary file write via insecure upload API; traversal in the file name rewrites files on the printer.	CWE-250
filename	upload data	contentwebserver/upload	Remote code execution / arbitrary file write via insecure upload API; traversal in the file name rewrites files on the printer.	CWE-250
cookie from prior session	path	tapy/server/appmgmt/applistDeployed	Pre-authenticated Remote Code Execution as root by abusing an exposed admin/app management endpoint and session cookie to trigger a connect-back shell.	CWE-250

17 Jun 2026 07:19Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.01097

SSVC

CWE-250