CVEs published by Toshiba Corporation

CVEs published by Toshiba Corporation (CVE Numbering Authority). 43 tracked.

• CVE-2024-3498 HIGH 7.8 Attackers can then execute malicious files by enabling certain services of the printer via the web configurati
• CVE-2024-3497 HIGH 8.8 Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal fi
• CVE-2024-3496 HIGH 8.8 Attackers can bypass the web login authentication process to gain access to the printer's system information a
• CVE-2024-27180 MEDIUM 6.7 An attacker with admin access can install rogue applications
• CVE-2024-27179 MEDIUM 4.7 Admin cookies are written in clear-text in logs
• CVE-2024-27178 HIGH 7.2 An attacker can get Remote Code Execution by overwriting files
• CVE-2024-27177 HIGH 7.2 An attacker can get Remote Code Execution by overwriting files
• CVE-2024-27176 HIGH 7.2 An attacker can get Remote Code Execution by overwriting files
• CVE-2024-27175 MEDIUM 4.4 Remote Command program allows an attacker to read any file using a Local File Inclusion vulnerability
• CVE-2024-27174 CRITICAL 9.8 Remote Command program allows an attacker to get Remote Code Execution
• CVE-2024-27173 CRITICAL 9.8 Remote Command program allows an attacker to get Remote Code Execution by overwriting existing Python files co
• CVE-2024-27172 CRITICAL 9.8 Remote Command program allows an attacker to get Remote Code Execution
• CVE-2024-27171 HIGH 7.4 A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Re
• CVE-2024-27170 HIGH 7.4 It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file
• CVE-2024-27169 HIGH 8.4 Toshiba printers provides API without authentication for internal access
• CVE-2024-27168 HIGH 7.1 It appears that some hardcoded keys are used for authentication to internal API
• CVE-2024-27167 HIGH 7.4 Toshiba printers use Sendmail to send emails to recipients
• CVE-2024-27166 HIGH 7.4 Coredump binaries in Toshiba printers have incorrect permissions
• CVE-2024-27165 HIGH 7.8 Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability
• CVE-2024-27164 HIGH 7.1 Toshiba printers contain hardcoded credentials
• CVE-2024-27163 MEDIUM 6.5 Toshiba printers will display the password of the admin user in clear-text and additional passwords when sendi
• CVE-2024-27162 MEDIUM 6.1 Toshiba printers provide a web interface that will load the JavaScript file
• CVE-2024-27161 MEDIUM 6.2 all the Toshiba printers have programs containing a hardcoded key used to encrypt files
• CVE-2024-27160 MEDIUM 6.2 All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs
• CVE-2024-27159 MEDIUM 6.2 All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs
• CVE-2024-27158 HIGH 7.4 All the Toshiba printers share the same hardcoded root password
• CVE-2024-27157 MEDIUM 6.8 The sessions are stored in clear-text logs
• CVE-2024-27156 MEDIUM 6.8 The session cookies, used for authentication, are stored in clear-text logs
• CVE-2024-27155 HIGH 7.7 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability
• CVE-2024-27154 MEDIUM 6.2 Passwords are stored in clear-text logs
• CVE-2024-27153 HIGH 7.4 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability
• CVE-2024-27152 HIGH 7.4 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability
• CVE-2024-27151 HIGH 7.4 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability
• CVE-2024-27150 HIGH 7.4 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability
• CVE-2024-27149 HIGH 7.4 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability
• CVE-2024-27148 HIGH 7.4 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability
• CVE-2024-27147 HIGH 7.4 The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability
• CVE-2024-27146 MEDIUM 6.7 The Toshiba printers do not implement privileges separation
• CVE-2024-27145 CRITICAL 9.8 The Toshiba printers provide several ways to upload files using the admin web interface
• CVE-2024-27144 CRITICAL 9.8 The Toshiba printers provide several ways to upload files using the web interface without authentication
• CVE-2024-27143 CRITICAL 9.8 Toshiba printers use SNMP for configuration
• CVE-2024-27142 MEDIUM 5.9 Toshiba printers use XML communication for the API endpoint provided by the printer
• CVE-2024-27141 MEDIUM 5.9 Toshiba printers use XML communication for the API endpoint provided by the printer

← Back to latest CVEs