2325 matches found
CVE-2024-27158
All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL...
CVE-2024-27155
The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL...
CVE-2024-27170 Hardcoded credentials for WebDAV access
It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file. Then, it is possible to get a full access with WebDAV to the printer. As for the affected products/models/versions, see the reference URL...
CVE-2024-27170
CVE-2024-27170 relates to Toshiba printers where credentials for WebDAV access are hardcoded and stored in a readable file, enabling an attacker with local access to obtain full WebDAV control over the device. The affected products are Toshiba printers (e.g., e-STUDIO family) as described in mult...
CVE-2024-27170 Hardcoded credentials for WebDAV access
It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file. Then, it is possible to get a full access with WebDAV to the printer. As for the affected products/models/versions, see the reference URL...
CVE-2024-27169
CVE-2024-27169 affects Toshiba printers (notably the e-STUDIO line) where an API is exposed without authentication for internal access. This enables a local attacker to bypass authentication and obtain administrative access to affected applications/devices. The vulnerability is due to lack of acc...
CVE-2024-27169 Lack of authentication
Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see the reference URL...
CVE-2024-27169 Lack of authentication
Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see the reference URL...
CVE-2024-27167 Insecure permissions
Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject a malicious Sendmail configuration file. As for the affected products/models/versions, see the reference URL...
CVE-2024-27167 Insecure permissions
Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject a malicious Sendmail configuration file. As for the affected products/models/versions, see the reference URL...
CVE-2024-27167
CVE-2024-27167 affects Toshiba printers that use Sendmail to send emails. The issue arises because Sendmail is used with several insecure directories, allowing a local attacker to inject a malicious Sendmail configuration file. Affected products/models/versions are referenced in the linked source...
CVE-2024-27166 Insecure permissions
Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/versions, see the reference URL...
CVE-2024-27166 Insecure permissions
Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/versions, see the reference URL...
CVE-2024-27166
CVE-2024-27166 affects Toshiba printers where coredump binaries have incorrect permissions, enabling a local attacker to steal confidential information. Technical details in connected docs confirm it impacts Toshiba MFPs with insecure file permissions on binaries. Remediation: apply the appropria...
CVE-2024-27165
CVE-2024-27165 affects Toshiba printers, with a Local Privilege Escalation via a suidperl binary that can grant root access to a local attacker. The CVE is documented with CVSS v3.1 base score 7.8 (Local, Low complexity, Privileges Required: Low, User Interaction: None; Confidentiality/Integrity/...
CVE-2024-27165 Local Privilege Escalation
Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges. As for the affected products/models/versions, see the reference URL...
CVE-2024-27165 Local Privilege Escalation
Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges. As for the affected products/models/versions, see the reference URL...
CVE-2024-27164 Hardcoded credentials
Toshiba printers contain hardcoded credentials. As for the affected products/models/versions, see the reference URL...
CVE-2024-27164
CVE-2024-27164 affects Toshiba printers (including MFP/e-STUDIO) with hardcoded credentials. The NVD entry notes a CVSSv3.1 base score of 7.1 (LOCAL, HIGH). Connected sources indicate multiple Toshiba printer advisories and vulnerability lists, but do not provide vendor-specific exploit details i...