CVE-2024-27169
Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, providing administrative access. As for the affected products/models/versions, see the reference URL.
- Affected products
- Toshiba Printers
- CVSS 3.1
- 8.4 HIGH
- EPSS
- 0.3% (22th percentile)
- Weakness
- CWE-306
- NVD status
- Deferred
- Published
- 2024-06-14
- Attack patterns
- CAPEC-115
- Entry point
- name path
- Path
- contentwebserver
Fix
This issue is fixed in the version released on June 14, 2024 and all later versions.
CVE-2024-27169 at NVD
1 known exploit for CVE-2024-27169
Proof-of-concept code and exploit modules indexed by Sploitus