CVE-2024-27173
🗓️ 14 Jun 2024 04:01:54Reported by ToshibaType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 115 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Exploit for CVE-2024-27173 | 14 Jun 202407:04 | – | githubexploit |
 | Toshiba e-STUDIO Security Vulnerability | 14 Jun 202400:00 | – | cnnvd |
 | CVE-2024-27173 insecure upload | 14 Jun 202404:01 | – | cvelist |
 | Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs | 17 Jun 202406:21 | – | jvn |
 | 0day-POC-for-CVE-2024-27173 | 10 Oct 202610:25 | – | kitploit |
 | CVE-2024-27173 | 14 Jun 202404:15 | – | nvd |
 | Toshiba Printers Multiple Vulnerabilities (May 2024) | 8 Jul 202400:00 | – | openvas |
 | Toshiba Multi-Function Printers 40 Vulnerabilities | 4 Jul 202400:00 | – | packetstorm |
 | PT-2024-21707 | 13 Jun 202400:00 | – | ptsecurity |
 | CVE-2024-27173: Improper Limitation of a Pathname to a Restricted Directory | 14 Jun 202400:00 | – | rapid7 |
10
[
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Toshiba Tec e-Studio multi-function peripheral (MFP)",
"vendor": "Toshiba Tec Corporation",
"versions": [
{
"status": "affected",
"version": "see the reference URL"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| name | nested | /contentwebserver/upload | Remote Code Execution via insecure upload API in ContentWebServer upload endpoint; attacker can overwrite root or WSGI/Python files (e.g., sapphost.py) and gain RCE. | CWE-22 |
| XML payload | request body | /contentwebserver | Pre-authenticated XXE vulnerability exposed via ContentWebServer POST; can be leveraged for DoS/information disclosure and potentially RCE in combination with other flaws. | CWE-22 |
| name | nested | /efiling/UploadFrame.html | Insecure upload surface via eFiling UI allowing crafted uploads to ContentWebServer/upload path with path traversal. | CWE-22 |
| name | nested | /efiling/UploadArchive.html | Insecure upload surface via eFiling UI enabling arbitrary file writes through path traversal to target files. | CWE-22 |
| name | nested | /Administration/maintenance/uploadsoft/DriverCustomize.html | Admin-upload forms that can be abused to overwrite arbitrary files in the printer, enabling Remote Code Execution. | CWE-22 |
| name | nested | /Registration/AddressBook/AddrImport.html | Upload path traversal vulnerability via address book import form, allowing overwriting of sensitive files. | CWE-22 |
| name | nested | /Administration/maintenance/xmlformat/XmlFormatList.html | Upload form exposed through maintenance/xmlformat pages enabling arbitrary file writes and potential RCE. | CWE-22 |
| name | nested | /Administration/SystemUpdates/nSystemUpdatesUpload.html | System update upload surface vulnerable to path traversal/file overwrite attacks leading to RCE. | CWE-22 |
| name | nested | /Administration/maintenance/uploadsoft/UnixList.html | Upload form for Unix filters vulnerable to path traversal overwriting sensitive binaries/scripts, enabling RCE. | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 07:19Current
10Critical risk
Vulners AI Score10
CVSS 3.19.8
EPSS0.03166
SSVC