Lucene search

K
zdiZhenhua Huang from trendmicro, Minmin LiZDI-24-815
HistoryJun 18, 2024 - 12:00 a.m.

Toshiba e-STUDIO2518A vsftpd Incorrect Permission Assignment Privilege Escalation Vulnerability

2024-06-1800:00:00
Zhenhua Huang from trendmicro, Minmin Li
www.zerodayinitiative.com
toshiba
e-studio2518a
vsftpd
vulnerability
permission assignment
privilege escalation
authentication
daemon

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.0%

This vulnerability allows local attackers to execute arbitrary code on affected installations of Toshiba e-STUDIO2518A printers. Authentication is required to exploit this vulnerability. The specific flaw exists within the vsftpd daemon. The issue results from incorrect permissions set on folders. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root.

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.0%

Related for ZDI-24-815