CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-27146: Lack of privileges separation
6.7
CVSS
Description
The Toshiba printers do not implement privileges separation. As for the affected products/models/versions, see the reference URL.
Classification
CVE ID: CVE-2024-27146
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.7
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products
Vendor: Toshiba Tec Corporation
Product: Toshiba Tec e-Studio multi-function peripheral (MFP)
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 18.39% (scored less or equal to compared to others)
EPSS Date: 2025-03-14 (when was this score calculated)
References
https://www.toshibatec.com/information/20240531_01.htmlhttps://www.toshibatec.com/information/pdf/information20240531_01.pdf
https://jvn.jp/en/vu/JVNVU97136265/index.html
http://seclists.org/fulldisclosure/2024/Jul/1