CVE-2024-27180

An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the reference URL.

Affected products

Toshiba Tec E-Studio Multi-Function Peripheral, E-Studio-2010-Ac, E-Studio-2015-Nc, E-Studio-2018 A, E-Studio-2020 Ac, E-Studio-2021 Ac, E-Studio-2110-Ac, E-Studio-2510-Ac

CVSS 3.1

6.7 MEDIUM

EPSS

0.3% (19th percentile)

Weakness

CWE-276

NVD status

Deferred

Published

2024-06-14

Attack patterns

CAPEC-29

Entry point

/./../../../../../home/SYSROM_SRC/build/common/bin/networkservice/ldapserver nested

Path

/contentwebserver/upload