CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-27151: Local Privilege Escalation and Remote Code Execution using insecure permissions
7.4
CVSS
Description
The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. The programs can be replaced by malicious programs by any local or remote attacker. As for the affected products/models/versions, see the reference URL.
Classification
CVE ID: CVE-2024-27151
CVSS Base Severity: HIGH
CVSS Base Score: 7.4
CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
Vendor: Toshiba Tec Corporation
Product: Toshiba Tec e-Studio multi-function peripheral (MFP)
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 18.39% (scored less or equal to compared to others)
EPSS Date: 2025-03-14 (when was this score calculated)
References
https://www.toshibatec.com/information/20240531_01.htmlhttps://www.toshibatec.com/information/pdf/information20240531_01.pdf
https://jvn.jp/en/vu/JVNVU97136265/index.html
http://seclists.org/fulldisclosure/2024/Jul/1