TT
Product
Toshiba Tec e-Studio multi-function peripheral (MFP)
43
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 23Medium 14Low 0
Watch
Add Toshiba Tec e-Studio multi-function peripheral (MFP) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27174 | 9.8 | Jun 14 | insecure upload Affected: see the reference URL |
| CVE-2024-27173 | 9.8 | Jun 14 | insecure upload Affected: see the reference URL |
| CVE-2024-27172 | 9.8 | Jun 14 | Remote Code Execution Affected: see the reference URL |
| CVE-2024-27145 | 9.8 | Jun 14 | Multiple Post-authenticated Remote Code Execution Affected: see the reference URL |
| CVE-2024-27144 | 9.8 | Jun 14 | Pre-authenticated Remote Code Execution Affected: see the reference URL |
| CVE-2024-27143 | 9.8 | Jun 14 | Pre-authenticated Remote Code Execution Affected: see the reference URL |
| CVE-2024-3497 | 8.8 | Jun 14 | Directory Traversal Remote Code Execution Vulnerability Affected: see the reference URL |
| CVE-2024-3496 | 8.8 | Jun 14 | Authentication Bypass Vulnerability Affected: see the reference URL |
| CVE-2024-27169 | 8.4 | Jun 14 | Lack of authentication Affected: see the reference URL |
| CVE-2024-3498 | 7.8 | Jun 14 | Incorrect Permission Assignment Privilege Escalation Vulnerability Affected: see the reference URL |
| CVE-2024-27165 | 7.8 | Jun 14 | Local Privilege Escalation Affected: see the reference URL |
| CVE-2024-27155 | 7.7 | Jun 14 | Local Privilege Escalation and Remote Code Execution using insecure permissions Affected: see the reference URL |
| CVE-2024-27171 | 7.4 | Jun 14 | Insecure permissions Affected: see the reference URL |
| CVE-2024-27170 | 7.4 | Jun 14 | Hardcoded credentials for WebDAV access Affected: see the reference URL |
| CVE-2024-27167 | 7.4 | Jun 14 | Insecure permissions Affected: see the reference URL |
| CVE-2024-27166 | 7.4 | Jun 14 | Insecure permissions Affected: see the reference URL |
| CVE-2024-27158 | 7.4 | Jun 14 | Hardcoded root password Affected: see the reference URL |
| CVE-2024-27153 | 7.4 | Jun 14 | Local Privilege Escalation and Remote Code Execution Affected: see the reference URL |
| CVE-2024-27152 | 7.4 | Jun 14 | Local Privilege Escalation and Remote Code Execution using insecure permissions Affected: see the reference URL |
| CVE-2024-27151 | 7.4 | Jun 14 | Local Privilege Escalation and Remote Code Execution using insecure permissions Affected: see the reference URL |
| CVE-2024-27150 | 7.4 | Jun 14 | Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH Affected: see the reference URL |
| CVE-2024-27149 | 7.4 | Jun 14 | Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD Affected: see the reference URL |
| CVE-2024-27148 | 7.4 | Jun 14 | Local Privilege Escalation and Remote Code Execution using insecure PATH Affected: see the reference URL |
| CVE-2024-27147 | 7.4 | Jun 14 | Local Privilege Escalation and Remote Code Execution using snmpd Affected: see the reference URL |
| CVE-2024-27178 | 7.2 | Jun 14 | Remote Code Execution Affected: see the reference URL |
| CVE-2024-27177 | 7.2 | Jun 14 | Remote Code Execution Affected: see the reference URL |
| CVE-2024-27176 | 7.2 | Jun 14 | Remote Code Execution Affected: see the reference URL |
| CVE-2024-27168 | 7.1 | Jun 14 | Hardcoded keys used to generate authentication cookies Affected: see the reference URL |
| CVE-2024-27164 | 7.1 | Jun 14 | Hardcoded credentials Affected: see the reference URL |
| CVE-2024-27157 | 6.8 | Jun 14 | Leak of authentication sessions in secure logs Affected: see the reference URL |
| CVE-2024-27156 | 6.8 | Jun 14 | Leak of authentication sessions in secure logs Affected: see the reference URL |
| CVE-2024-27180 | 6.7 | Jun 14 | TOCTOU vulnerability Affected: see the reference URL |
| CVE-2024-27146 | 6.7 | Jun 14 | Lack of privileges separation Affected: see the reference URL |
| CVE-2024-27163 | 6.5 | Jun 14 | Leak of admin password and passwords Affected: see the reference URL |
| CVE-2024-27161 | 6.2 | Jun 14 | Hardcoded password used to encrypt files Affected: see the reference URL |
| CVE-2024-27160 | 6.2 | Jun 14 | Hardcoded password used to encrypt logs and use of weak cipher Affected: see the reference URL |
| CVE-2024-27159 | 6.2 | Jun 14 | Hardcoded password used to encrypt logs Affected: see the reference URL |
| CVE-2024-27154 | 6.2 | Jun 14 | Passwords are stored in clear-text logs. Affected: see the reference URL |
| CVE-2024-27162 | 6.1 | Jun 14 | DOM-based XSS Affected: see the reference URL |
| CVE-2024-27142 | 5.9 | Jun 14 | Pre-authenticated XXE injection Affected: see the reference URL |
| CVE-2024-27141 | 5.9 | Jun 14 | Pre-authenticated Time-Based Blind XXE injection Affected: see the reference URL |
| CVE-2024-27179 | 4.7 | Jun 14 | Session disclosure inside the log files Affected: see the reference URL |
| CVE-2024-27175 | 4.4 | Jun 14 | Local File Inclusion Affected: see the reference URL |
Showing 43