CVE-2024-27159

🗓️ 14 Jun 2024 03:29:15Reported by ToshibaType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

All Toshiba printers vulnerable to hardcoded key encryption in log

Reporter	Title	Published	Views	Family All 9
CNNVD	Toshiba e-STUDIO Security Vulnerability	14 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-27159 Hardcoded password used to encrypt logs	14 Jun 202403:29	–	cvelist
EUVD	EUVD-2024-24400	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs	17 Jun 202406:21	–	jvn
NVD	CVE-2024-27159	14 Jun 202404:15	–	nvd
OpenVAS	Toshiba Printers Multiple Vulnerabilities (May 2024)	8 Jul 202400:00	–	openvas
Packet Storm	Toshiba Multi-Function Printers 40 Vulnerabilities	4 Jul 202400:00	–	packetstorm
Positive Technologies	PT-2024-21691 · Toshiba · Toshiba Printers	14 Jun 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-27159 Hardcoded password used to encrypt logs	14 Jun 202403:29	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Toshiba Tec e-Studio multi-function peripheral (MFP)",
    "vendor": "Toshiba Tec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "see the reference URL"
      }
    ]
  }
]

Source	Link
toshibatec	www.toshibatec.com/information/20240531_01.html
seclists	www.seclists.org/fulldisclosure/2024/Jul/1
toshibatec	www.toshibatec.com/information/pdf/information20240531_01.pdf
jvn	www.jvn.jp/en/vu/JVNVU97136265/index.html

Parameter	Position	Path	Description	CWE
	path	contentwebserver	Pre-authenticated XXE injection endpoint used for DoS/XXE attacks.	CWE-798
<!DOCTYPE lolz [ <!ENTITY lol "lol"> <!ELEMENT lolz (#PCDATA)> <!ENTITY lol1 "&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;&lol;">] > <lolz>&lol9;</lolz>	request body	contentwebserver	XXE payloads delivered in the HTTP body to extract information or impact the printer.	CWE-798
name	multipart/form-data	contentwebserver/upload	Upload API vulnerable to arbitrary file write via crafted name/path value enabling RCE/persistence.	CWE-798
CsrfpId	multipart/form-data	contentwebserver/upload	Upload API vulnerable to arbitrary file write via crafted name/path value enabling RCE/persistence.	CWE-798
DeviceInformationModel	multipart/form-data	contentwebserver/upload	Upload API vulnerable to arbitrary file write via crafted name/path value enabling RCE/persistence.	CWE-798

17 Jun 2026 07:19Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.2

EPSS0.00256

SSVC

CWE-798