CVE-2024-27167
Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject a malicious Sendmail configuration file. As for the affected products/models/versions, see the reference URL.
- Affected products
- Toshiba Printers
- CVSS 3.1
- 7.4 HIGH
- EPSS
- 0.2% (16th percentile)
- Weakness
- CWE-276
- NVD status
- Deferred
- Published
- 2024-06-14
- Attack patterns
- CAPEC-180
- Entry point
- name upload data
- Path
- contentwebserver/upload
Fix
This issue is fixed in the version released on June 14, 2024 and all later versions.
CVE-2024-27167 at NVD
1 known exploit for CVE-2024-27167
Proof-of-concept code and exploit modules indexed by Sploitus