Toshiba

Latest CVEs · RSS

• CVE-2024-3498 2024-06-14 · CVSS 7.8
  Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page and elevate its privileges to root. As for
• CVE-2024-3497 2024-06-14 · CVSS 8.8
  Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the aff
• CVE-2024-3496 2024-06-14 · CVSS 8.8
  Attackers can bypass the web login authentication process to gain access to the printer's system information and upload malicious drivers to the printer. As for
• CVE-2024-27180 2024-06-14 · CVSS 6.7
  An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the reference URL.
• CVE-2024-27179 2024-06-14 · CVSS 4.7
  Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/vers
• CVE-2024-27178 2024-06-14 · CVSS 7.2
  An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name variable. This vulnerability can be execute
• CVE-2024-27177 2024-06-14 · CVSS 7.2
  An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying package name variable. This vulnerability can be exec
• CVE-2024-27176 2024-06-14 · CVSS 7.2
  An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying session ID variable. This vulnerability can be execute
• CVE-2024-27175 2024-06-14 · CVSS 4.4
  Remote Command program allows an attacker to read any file using a Local File Inclusion vulnerability. An attacker can read any file on the printer. As for the
• CVE-2024-27174 2024-06-14 · CVSS 9.8
  Remote Command program allows an attacker to get Remote Code Execution. This vulnerability can be executed in combination with other vulnerabilities and diffic
• CVE-2024-27173 2024-06-14 · CVSS 9.8
  Remote Command program allows an attacker to get Remote Code Execution by overwriting existing Python files containing executable code. This vulnerability can b
• CVE-2024-27172 2024-06-14 · CVSS 9.8
  Remote Command program allows an attacker to get Remote Code Execution. As for the affected products/models/versions, see the reference URL.
• CVE-2024-27171 2024-06-14 · CVSS 7.4
  A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code Execution. As for the affected products/
• CVE-2024-27170 2024-06-14 · CVSS 7.4
  It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file. Then, it is possible to get a full access with We
• CVE-2024-27169 2024-06-14 · CVSS 8.4
  Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative a
• CVE-2024-27168 2024-06-14 · CVSS 7.1
  It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow attackers to bypass authentication and rea
• CVE-2024-27167 2024-06-14 · CVSS 7.4
  Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject a malicious Sendmail
• CVE-2024-27166 2024-06-14 · CVSS 7.4
  Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/versi
• CVE-2024-27165 2024-06-14 · CVSS 7.8
  Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges. As for the affected
• CVE-2024-27164 2024-06-14 · CVSS 7.1
  Toshiba printers contain hardcoded credentials. As for the affected products/models/versions, see the reference URL.
• CVE-2024-27163 2024-06-14 · CVSS 6.5
  Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests to the internal API. A
• CVE-2024-27162 2024-06-14 · CVSS 6.1
  Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the web
• CVE-2024-27161 2024-06-14 · CVSS 6.2
  all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the encrypted files using the hardcoded key. In
• CVE-2024-27160 2024-06-14 · CVSS 6.2
  All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded ke
• CVE-2024-27159 2024-06-14 · CVSS 6.2
  All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded ke