Lucene search

K
nvdEcc0f906-8666-484c-bcf8-c3b7520a72f0NVD:CVE-2024-27166
HistoryJun 14, 2024 - 4:15 a.m.

CVE-2024-27166

2024-06-1404:15:34
CWE-276
CWE-319
CWE-256
ecc0f906-8666-484c-bcf8-c3b7520a72f0
web.nvd.nist.gov
2
toshiba printers
coredump binaries
incorrect permissions
local attacker
confidential information
cve-2024-27166

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

15.5%

Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/versions, see the reference URL.

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

15.5%

Related for NVD:CVE-2024-27166