Toshiba
Toshiba Printers: vulnerabilidades y CVE
Toshiba Printers tiene 18 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE18
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-27169 | Alta (8.4) | 0.30% | — | 14 jun 2024 | Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see… |
| CVE-2024-27167 | Alta (7.4) | 0.25% | — | 14 jun 2024 | Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject a malicious Sendmail configuration file. As for the affected… |
| CVE-2024-27166 | Alta (7.4) | 0.17% | — | 14 jun 2024 | Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected products/models/versions, see the reference URL. |
| CVE-2024-27165 | Alta (7.8) | 0.23% | — | 14 jun 2024 | Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges. As for the affected products/models/versions, see the reference URL. |
| CVE-2024-27164 | Alta (7.1) | 0.25% | — | 14 jun 2024 | Toshiba printers contain hardcoded credentials. As for the affected products/models/versions, see the reference URL. |
| CVE-2024-27163 | Media (6.5) | 0.42% | — | 14 jun 2024 | Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests to the internal API. An attacker stealing the cookie of an admin or abusing a XSS… |
| CVE-2024-27162 | Media (6.1) | 21% | — | 14 jun 2024 | Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the… |
| CVE-2024-27161 | Media (6.2) | 0.16% | — | 14 jun 2024 | all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the encrypted files using the hardcoded key. Insecure algorithm is used for the encryption. This… |
| CVE-2024-27160 | Media (6.2) | 0.24% | — | 14 jun 2024 | All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with… |
| CVE-2024-27159 | Media (6.2) | 0.26% | — | 14 jun 2024 | All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with… |
| CVE-2024-27158 | Alta (7.4) | 0.28% | — | 14 jun 2024 | All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL. |
| CVE-2024-27151 | Alta (7.4) | 0.40% | — | 14 jun 2024 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote… |
| CVE-2024-27149 | Alta (7.4) | 0.25% | — | 14 jun 2024 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL. |
| CVE-2024-27148 | Alta (7.4) | 0.25% | — | 14 jun 2024 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL. |
| CVE-2024-27146 | Media (6.7) | 0.24% | — | 14 jun 2024 | The Toshiba printers do not implement privileges separation. As for the affected products/models/versions, see the reference URL. |
| CVE-2024-27145 | Crítica (9.8) | 1.0% | — | 14 jun 2024 | The Toshiba printers provide several ways to upload files using the admin web interface. An attacker can remotely compromise any Toshiba printer. An attacker can overwrite any insecure files. This vulnerability can be… |
| CVE-2024-27144 | Crítica (9.8) | 1.2% | — | 14 jun 2024 | The Toshiba printers provide several ways to upload files using the web interface without authentication. An attacker can overwrite any insecure files. And the Toshiba printers are vulnerable to a Local Privilege… |
| CVE-2024-27142 | Media (5.9) | 0.92% | — | 14 jun 2024 | Toshiba printers use XML communication for the API endpoint provided by the printer. For the endpoint, XML parsing library is used and it is vulnerable to a time-based blind XML External Entity (XXE) vulnerability. An… |