CVE-2024-27152

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. As for the affected products/models/versions, see the reference URL.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published: Jun 14, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-271537.4The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. CVE-2024-271546.2Passwords are stored in clear-text logs. An attacker can retrieve passwords. As for the affected products/models/versions, see the reference CVE-2024-271557.7The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. CVE-2024-271566.8The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote atta CVE-2024-271576.8The sessions are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials CVE-2024-271587.4All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL.CVE-2024-271596.2All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files us CVE-2024-27166.1A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been classified as problematic. This affects an unknown CVE-2024-271606.2All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files us CVE-2024-271616.2all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the encrypted files using t CVE-2024-271626.1Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loade CVE-2024-271636.5Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests to