TT
Vendor
Toshiba Tec Corporation
91
CVEs
0
On KEV
1
New 30D
Products
MM7.5
Multiple Multifunction Printers
Toshiba Tec Corporation
1 CVEs0 on KEV1 new
TT9.8
Toshiba Tec e-Studio multi-function peripheral (MFP)
Toshiba Tec Corporation
43 CVEs0 on KEV0 new
MM9.1
Multiple MFPs (multifunction printers)
Toshiba Tec Corporation
14 CVEs0 on KEV0 new
E19.8
e-STUDIO 1058
Toshiba Tec Corporation
9 CVEs0 on KEV0 new
E19.8
e-STUDIO 1208
Toshiba Tec Corporation
9 CVEs0 on KEV0 new
E99.8
e-STUDIO 908
Toshiba Tec Corporation
9 CVEs0 on KEV0 new
TT6.5
Toshiba Tec MFPs
Toshiba Tec Corporation
3 CVEs0 on KEV0 new
MP6.1
Multiple printers and scanners
Toshiba Tec Corporation
2 CVEs0 on KEV0 new
MD7.8
Multiple driver installers for Windows
Toshiba Tec Corporation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-58388 | MM Multiple Multifunction Printers Toshiba Tec Corporation | 7.5 | Oct 1 | Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html |
| CVE-2026-63563 | TT Toshiba Tec MFPs Toshiba Tec Corporation | 6.5 | Aug 3 | Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration |
| CVE-2026-63545 | TT Toshiba Tec MFPs Toshiba Tec Corporation | 2.4 | Aug 3 | Sharp and Toshiba Tec MFPs (multifunction printers) caches data internally when printing, and leave them uncleared |
| CVE-2026-60011 | TT Toshiba Tec MFPs Toshiba Tec Corporation | 5.3 | Aug 3 | Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly access certain image data stored to the affected product |
| CVE-2025-49797 | MD Multiple driver installers for Windows Toshiba Tec Corporation | 7.8 | Jun 25 | Multiple Brother driver installers for Windows contain a privilege escalation vulnerability |
| CVE-2024-36254 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 7.5 | Nov 26 | Out-of-bounds read vulnerability exists in Sharp Corporation and Toshiba Tec Corporation multiple MFPs (multifunction printers), which may lead to a denial-of-service (DoS)… |
| CVE-2024-36251 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 7.5 | Nov 26 | The web interface of the affected devices process some crafted HTTP requests improperly, leading to a device crash |
| CVE-2024-36249 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 7.4 | Nov 26 | Cross-site scripting vulnerability exists in Sharp Corporation and Toshiba Tech Corporation multiple MFPs (multifunction printers) |
| CVE-2024-36248 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 9.1 | Nov 26 | API keys for some cloud services are hardcoded in the "main" binary |
| CVE-2024-35244 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 9.1 | Nov 26 | There are several hidden accounts |
| CVE-2024-34162 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 5.3 | Nov 26 | The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users |
| CVE-2024-33616 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 5.3 | Nov 26 | Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrative privilege |
| CVE-2024-33610 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 9.1 | Nov 26 | "sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication |
| CVE-2024-33605 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 7.5 | Nov 26 | Improper processing of some parameters of installed_emanual_list.html leads to a path traversal vulnerability |
| CVE-2024-32151 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 5.9 | Nov 26 | User passwords are decrypted and stored on memory before any user logged in |
| CVE-2024-29978 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 5.9 | Nov 26 | User passwords are decrypted and stored on memory before any user logged in |
| CVE-2024-29146 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 5.9 | Nov 26 | User passwords are decrypted and stored on memory before any user logged in |
| CVE-2024-28955 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 5.9 | Nov 26 | Affected devices create coredump files when crashed, storing them with world-readable permission |
| CVE-2024-28038 | MM Multiple MFPs (multifunction printers) Toshiba Tec Corporation | 9.0 | Nov 26 | The web interface of the affected devices processes a cookie value improperly, leading to a stack buffer overflow |
| CVE-2024-48870 | E1 e-STUDIO 1058 Toshiba Tec Corporation | 4.8 | Oct 25 | Sharp and Toshiba Tec MFPs improperly validate input data in URI data registration, resulting in a stored cross-site scripting vulnerability |
| CVE-2024-47801 | E1 e-STUDIO 1208 Toshiba Tec Corporation | 6.1 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability |
| CVE-2024-47549 | E9 e-STUDIO 908 Toshiba Tec Corporation | 6.1 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers |
| CVE-2024-47406 | E1 e-STUDIO 1208 Toshiba Tec Corporation | 9.8 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability |
| CVE-2024-47005 | E1 e-STUDIO 1208 Toshiba Tec Corporation | 8.1 | Oct 25 | Sharp and Toshiba Tec MFPs provide configuration related APIs |
| CVE-2024-45842 | E9 e-STUDIO 908 Toshiba Tec Corporation | 5.3 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability |
| CVE-2024-45829 | E9 e-STUDIO 908 Toshiba Tec Corporation | 7.5 | Oct 25 | Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read… |
| CVE-2024-43424 | E1 e-STUDIO 1208 Toshiba Tec Corporation | 7.5 | Oct 25 | Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability |
| CVE-2024-42420 | E9 e-STUDIO 908 Toshiba Tec Corporation | 7.5 | Oct 25 | Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword search input and improper processing of SOAP messages |
| CVE-2024-3498 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.8 | Jun 14 | Incorrect Permission Assignment Privilege Escalation Vulnerability |
| CVE-2024-3497 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 8.8 | Jun 14 | Directory Traversal Remote Code Execution Vulnerability |
| CVE-2024-3496 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 8.8 | Jun 14 | Authentication Bypass Vulnerability |
| CVE-2024-27180 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 6.7 | Jun 14 | TOCTOU vulnerability |
| CVE-2024-27179 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 4.7 | Jun 14 | Session disclosure inside the log files |
| CVE-2024-27178 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.2 | Jun 14 | Remote Code Execution |
| CVE-2024-27177 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.2 | Jun 14 | Remote Code Execution |
| CVE-2024-27176 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.2 | Jun 14 | Remote Code Execution |
| CVE-2024-27175 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 4.4 | Jun 14 | Local File Inclusion |
| CVE-2024-27174 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 9.8 | Jun 14 | insecure upload |
| CVE-2024-27173 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 9.8 | Jun 14 | insecure upload |
| CVE-2024-27172 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 9.8 | Jun 14 | Remote Code Execution |
| CVE-2024-27171 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.4 | Jun 14 | Insecure permissions |
| CVE-2024-27170 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.4 | Jun 14 | Hardcoded credentials for WebDAV access |
| CVE-2024-27169 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 8.4 | Jun 14 | Lack of authentication |
| CVE-2024-27168 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.1 | Jun 14 | Hardcoded keys used to generate authentication cookies |
| CVE-2024-27167 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.4 | Jun 14 | Insecure permissions |
| CVE-2024-27166 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.4 | Jun 14 | Insecure permissions |
| CVE-2024-27165 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.8 | Jun 14 | Local Privilege Escalation |
| CVE-2024-27164 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.1 | Jun 14 | Hardcoded credentials |
| CVE-2024-27163 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 6.5 | Jun 14 | Leak of admin password and passwords |
| CVE-2024-27162 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 6.1 | Jun 14 | DOM-based XSS |
| CVE-2024-27161 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 6.2 | Jun 14 | Hardcoded password used to encrypt files |
| CVE-2024-27160 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 6.2 | Jun 14 | Hardcoded password used to encrypt logs and use of weak cipher |
| CVE-2024-27159 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 6.2 | Jun 14 | Hardcoded password used to encrypt logs |
| CVE-2024-27158 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.4 | Jun 14 | Hardcoded root password |
| CVE-2024-27157 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 6.8 | Jun 14 | Leak of authentication sessions in secure logs |
| CVE-2024-27156 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 6.8 | Jun 14 | Leak of authentication sessions in secure logs |
| CVE-2024-27155 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.7 | Jun 14 | Local Privilege Escalation and Remote Code Execution using insecure permissions |
| CVE-2024-27154 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 6.2 | Jun 14 | Passwords are stored in clear-text logs. |
| CVE-2024-27153 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.4 | Jun 14 | Local Privilege Escalation and Remote Code Execution |
| CVE-2024-27152 | TT Toshiba Tec e-Studio multi-function peripheral (MFP) Toshiba Tec Corporation | 7.4 | Jun 14 | Local Privilege Escalation and Remote Code Execution using insecure permissions |