Lucene search
CVE-2024-27152
Toshiba printers Local Privilege Escalation vulnerabilit
Show more
| Reporter | Title | Published | Views | Family All 5 |
|---|---|---|---|---|
 | CVE-2024-27152 | 14 Jun 202403:15 | – | nvd |
 | CVE-2024-27152 Local Privilege Escalation and Remote Code Execution using insecure permissions | 14 Jun 202402:55 | – | cvelist |
 | CVE-2024-27152 Local Privilege Escalation and Remote Code Execution using insecure permissions | 14 Jun 202402:55 | – | vulnrichment |
 | Toshiba Multi-Function Printers 40 Vulnerabilities | 4 Jul 202400:00 | – | packetstorm |
 | Toshiba Printers Multiple Vulnerabilities (May 2024) | 8 Jul 202400:00 | – | openvas |
[
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Toshiba Tec e-Studio multi-function peripheral (MFP)",
"vendor": "Toshiba Tec Corporation",
"versions": [
{
"status": "affected",
"version": "see the reference URL"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| csrfpId | request body | /contentwebserver | The endpoint is vulnerable to Blind XML External Entity (XXE) injection due to improper XML parsing, allowing denial of service attacks. | CWE-276 |
| Name | binary | /contentwebserver/upload | The upload API allows arbitrary file uploads leading to potential remote code execution due to insecure handling of uploaded files. | CWE-276 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo14 Jun 2024 03:15Current
7.5High risk
Vulners AI Score7.5
CVSS37.4
EPSS0.00031
SSVC