Toshiba Printers Vulnerable to Local Privilege Escalation Attack
CVE-2024-27152

7.4HIGH

Key Information:

Vendor
Toshiba
Vendor
CVE Published:
14 June 2024

Summary

Toshiba printers are exposed to a Local Privilege Escalation vulnerability that can be exploited remotely. This security flaw allows an attacker to gain unauthorized access to the printer's functions and potentially manipulate or steal sensitive information. The vulnerability affects multiple models of Toshiba printers, thereby posing significant risks to organizations utilizing these devices in their networks. Security teams should assess their current installations and review applicable patches and updates provided by Toshiba to mitigate potential attacks.

Affected Version(s)

Toshiba Tec e-Studio multi-function peripheral (MFP) Linux see the reference URL

References

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

We expresses its gratitude to Pierre Barre for reporting relevant security vulnerabilities for our products.
.