Critical severity · published Jun 14, 2024
CVE-2024-27174
insecure upload
9.8
CVSS
1.6%
EPSS
No
On KEV
Description
Remote Command program allows an attacker to get Remote Code Execution. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than the score listed in the "Base Score" of this vulnerability. For detail on related other vulnerabilities, please ask to the below contact point.
https://www.toshibatec.com/contacts/products/
As for the affected products/models/versions, see the reference URL.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TT
Toshiba Tec e-Studio multi-function peripheral (MFP) · Toshiba Tec Corporation
see the reference URL · source: vendor
ES
E-studio-2010-ac · Toshibatec
0 · source: CISA
ES
E-studio-2015-nc · Toshibatec
0 · source: CISA
EA
E-studio-2018 A · Toshibatec
0 · source: CISA
EA
E-studio-2020 AC · Toshibatec
0 · source: CISA
EA
E-studio-2021 AC · Toshibatec
0 · source: CISA
ES
E-studio-2110-ac · Toshibatec
0 · source: CISA
ES
E-studio-2510-ac · Toshibatec
0 · source: CISA
ES
E-studio-2515-nc · Toshibatec
0 · source: CISA
EA
E-studio-2518 A · Toshibatec
0 · source: CISA
EN
E-studio-2520 NC · Toshibatec
0 · source: CISA
EA
E-studio-2521 AC · Toshibatec
0 · source: CISA
Affected product
TT
Toshiba Tec e-Studio multi-function peripheral (MFP)
Toshiba Tec Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-27174
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-27174
seclists.org
http://seclists.org/fulldisclosure/2024/Jul/1
jvn.jp
https://jvn.jp/en/vu/JVNVU97136265/index.html
www.toshibatec.com
https://www.toshibatec.com/information/20240531_01.html
www.toshibatec.com
https://www.toshibatec.com/information/pdf/information20240531_01.pdf
More from Toshiba Tec e-Studio multi-function peripheral (MFP)
9.8
CVE-2024-27173
insecure upload
9.8
CVE-2024-27172
Remote Code Execution
9.8
CVE-2024-27145
Multiple Post-authenticated Remote Code Execution
9.8
CVE-2024-27144
Pre-authenticated Remote Code Execution
9.8
CVE-2024-27143
Pre-authenticated Remote Code Execution
