CVEvulnerability
CVE-2024-27155
7.7 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2024-06-14
- Last modified
- 2026-06-17
- Assigner
- ecc0f906-8666-484c-bcf8-c3b7520a72f0
- CVSS 3.1 (ecc0f906-8666-484c-bcf8-c3b7520a72f0)
- 7.7 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-276
Description
The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- http://seclists.org/fulldisclosure/2024/Jul/1 seclists.org
- https://jvn.jp/en/vu/JVNVU97136265/index.html jvn.jp
- https://www.toshibatec.com/information/20240531_01.html www.toshibatec.com
- https://www.toshibatec.com/information/pdf/information20240531_01.pdf www.toshibatec.com
- http://seclists.org/fulldisclosure/2024/Jul/1 seclists.org
- https://jvn.jp/en/vu/JVNVU97136265/index.html jvn.jp
- https://www.toshibatec.com/information/20240531_01.html www.toshibatec.com
- https://www.toshibatec.com/information/pdf/information20240531_01.pdf www.toshibatec.com