Toshibatec vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2024-48870	EF E-studio908 Firmware Toshibatec	4.8	0%	Oct 25	Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability
CVE-2024-47801	EF E-studio1058 Firmware Toshibatec	6.1	0%	Oct 25	Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability
CVE-2024-47549	EF E-studio1208 Firmware Toshibatec	6.1	0%	Oct 25	Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers
CVE-2024-47406	EF E-studio908 Firmware Toshibatec	9.8	1%	Oct 25	Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability
CVE-2024-47005	EF E-studio908 Firmware Toshibatec	8.1	0%	Oct 25	Sharp and Toshiba Tec MFPs provide configuration related APIs
CVE-2024-45842	EF E-studio908 Firmware Toshibatec	5.3	1%	Oct 25	Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability
CVE-2024-45829	EF E-studio908 Firmware Toshibatec	7.5	1%	Oct 25	Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read…
CVE-2024-43424	EF E-studio1058 Firmware Toshibatec	7.5	1%	Oct 25	Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability
CVE-2024-42420	EF E-studio908 Firmware Toshibatec	7.5	1%	Oct 25	Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages
CVE-2024-3498	ES E-studio-3615-nc Toshibatec	7.8	0%	Jun 14	Incorrect Permission Assignment Privilege Escalation Vulnerability
CVE-2024-3497	ES E-studio-2515-nc Toshibatec	8.8	1%	Jun 14	Directory Traversal Remote Code Execution Vulnerability
CVE-2024-3496	EA E-studio-3025 AC Toshibatec	8.8	1%	Jun 14	Authentication Bypass Vulnerability
CVE-2024-27180	ES E-studio-330-ac Toshibatec	6.7	0%	Jun 14	TOCTOU vulnerability
CVE-2024-27179	ES E-studio-5528-a Toshibatec	4.7	0%	Jun 14	Session disclosure inside the log files
CVE-2024-27178	ES E-studio-2015-nc Toshibatec	7.2	2%	Jun 14	Remote Code Execution
CVE-2024-27177	ES E-studio-2010-ac Toshibatec	7.2	2%	Jun 14	Remote Code Execution
CVE-2024-27176	ES E-studio-3015-nc Toshibatec	7.2	2%	Jun 14	Remote Code Execution
CVE-2024-27174	ES E-studio-6527-ac Toshibatec	9.8	2%	Jun 14	insecure upload
CVE-2024-27172	ES E-studio-400-ac Toshibatec	9.8	27%	Jun 14	Remote Code Execution
CVE-2024-27171	ES E-studio-400-ac Toshibatec	7.4	0%	Jun 14	Insecure permissions
CVE-2024-27170	ES E-studio-3515-nc Toshibatec	7.4	0%	Jun 14	Hardcoded credentials for WebDAV access
CVE-2024-27169	EA E-studio-4615 AC Toshibatec	8.4	0%	Jun 14	Lack of authentication
CVE-2024-27167	ES E-studio-2610-ac Toshibatec	7.4	0%	Jun 14	Insecure permissions
CVE-2024-27166	EA E-studio-2018 A Toshibatec	7.4	0%	Jun 14	Insecure permissions
CVE-2024-27165	EA E-studio-3525 Acg Toshibatec	7.8	0%	Jun 14	Local Privilege Escalation
CVE-2024-27164	ES E-studio-3615-nc Toshibatec	7.1	0%	Jun 14	Hardcoded credentials
CVE-2024-27162	EA E-studio-2521 AC Toshibatec	6.1	21%	Jun 14	DOM-based XSS
CVE-2024-27161	EA E-studio-3525 Acg Toshibatec	6.2	0%	Jun 14	Hardcoded password used to encrypt files
CVE-2024-27160	EA E-studio-5525 Acg Toshibatec	6.2	0%	Jun 14	Hardcoded password used to encrypt logs and use of weak cipher
CVE-2024-27158	ES E-studio-3028-a Toshibatec	7.4	0%	Jun 14	Hardcoded root password
CVE-2024-27155	ES E-studio-4528-a Toshibatec	7.7	0%	Jun 14	Local Privilege Escalation and Remote Code Execution using insecure permissions
CVE-2024-27154	ES E-studio-5528-a Toshibatec	6.2	0%	Jun 14	Passwords are stored in clear-text logs.
CVE-2024-27153	EA E-studio-2521 AC Toshibatec	7.4	0%	Jun 14	Local Privilege Escalation and Remote Code Execution
CVE-2024-27152	ES E-studio-3115-nc Toshibatec	7.4	0%	Jun 14	Local Privilege Escalation and Remote Code Execution using insecure permissions
CVE-2024-27151	ES E-studio-2110-ac Toshibatec	7.4	0%	Jun 14	Local Privilege Escalation and Remote Code Execution using insecure permissions
CVE-2024-27150	EA E-studio-5015 AC Toshibatec	7.4	0%	Jun 14	Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH
CVE-2024-27149	EA E-studio-2020 AC Toshibatec	7.4	0%	Jun 14	Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD
CVE-2024-27148	ES E-studio-9029-a Toshibatec	7.4	0%	Jun 14	Local Privilege Escalation and Remote Code Execution using insecure PATH
CVE-2024-27147	EA E-studio-5525 Acg Toshibatec	7.4	0%	Jun 14	Local Privilege Escalation and Remote Code Execution using snmpd
CVE-2024-27146	EA E-studio-2521 AC Toshibatec	6.7	0%	Jun 14	Lack of privileges separation
CVE-2024-27145	EA E-studio-4525 AC Toshibatec	9.8	1%	Jun 14	Multiple Post-authenticated Remote Code Execution
CVE-2024-27144	ES E-studio-2015-nc Toshibatec	9.8	1%	Jun 14	Pre-authenticated Remote Code Execution
CVE-2024-27143	EA E-studio-2521 AC Toshibatec	9.8	1%	Jun 14	Pre-authenticated Remote Code Execution
CVE-2024-27141	ES E-studio-6528-a Toshibatec	5.9	1%	Jun 14	Pre-authenticated Time-Based Blind XXE injection
CVE-2023-29984	E3 E-studio 302dnf Firmware Toshibatec	7.5	1%	Jul 11	Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3
CVE-2014-1990	ES E-studio-233 Toshibatec	–	1%	Apr 19	Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers…
CVE-2012-1239	EF E-studio-281c Firmware Toshibatec	–	5%	Apr 6	The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421…