CVE-2024-27151
Local Privilege Escalation and Remote Code Execution using insecure permissions
- State
- Published
- Severity
- 7.4 High
- Published
- Jun 14, 2024
- Updated
- Feb 13, 2025
- Reserved
- Feb 21, 2024
Description
The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.4 High | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | Toshiba |
Weaknesses
- CWE-276 Incorrect Default Permissions
Affected Products
| Product | Versions |
|---|---|
Toshiba Tec e-Studio multi-function peripheral (MFP)Toshiba Tec Corporation |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.