CVE-2024-27154

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

Passwords are stored in clear-text logs. An attacker can retrieve passwords. As for the affected products/models/versions, see the reference URL.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

VendorProductVersions
Toshiba Tec CorporationToshiba Tec e-Studio multi-function peripheral (MFP)see the reference URL
toshibatece-studio-2521_ac<= *
toshibatece-studio-2515-nc<= *
toshibatece-studio-2020_ac<= *
toshibatece-studio-2520_nc<= *
toshibatece-studio-2021_ac<= *
toshibatece-studio-2525_ac<= *
toshibatece-studio-3025_ac<= *
toshibatece-studio-3525_ac<= *
toshibatece-studio-3525_acg<= *
toshibatece-studio-4525_ac<= *
toshibatece-studio-5525_ac<= *
toshibatece-studio-5525_acg<= *
toshibatece-studio-6525_ac<= *
toshibatece-studio-6525_acg<= *
toshibatece-studio-2528-a<= *
toshibatece-studio-3028-a<= *
toshibatece-studio-3528-a<= *
toshibatece-studio-3528-ag<= *
toshibatece-studio-4528-a<= *
toshibatece-studio-4528-ag<= *
toshibatece-studio-5528-a<= *
toshibatece-studio-6528-a<= *
toshibatece-studio-6526-ac<= *
toshibatece-studio-6527-ac<= *
toshibatece-studio-7527-ac<= *
toshibatece-studio-6529-a<= *
toshibatece-studio-7529-a<= *
toshibatece-studio-9029-a<= *
toshibatece-studio-330-ac<= *
toshibatece-studio-400-ac<= *
toshibatece-studio-2010-ac<= *
toshibatece-studio-2110-ac<= *
toshibatece-studio-2510-ac<= *
toshibatece-studio-2610-ac<= *
toshibatece-studio-2015-nc<= *
toshibatece-studio-2615-nc<= *
toshibatece-studio-3015-nc<= *
toshibatece-studio-3115-nc<= *
toshibatece-studio-3515-nc<= *
toshibatece-studio-3615-nc<= *
toshibatece-studio-4515_ac<= *
toshibatece-studio-4615_ac<= *
toshibatece-studio-5015_ac<= *
toshibatece-studio-5115_ac<= *
toshibatece-studio-2018_a<= *
toshibatece-studio-2518_a<= *
toshibatece-studio-2618_a<= *
toshibatece-studio-3018_a<= *
toshibatece-studio-3118_a<= *

References

Timeline

Published
Jun 14, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-271557.7The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise any Toshiba printer. CVE-2024-271566.8The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attaCVE-2024-271576.8The sessions are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentialsCVE-2024-271587.4All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL.CVE-2024-271596.2All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files usCVE-2024-27166.1A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been classified as problematic. This affects an unknownCVE-2024-271606.2All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files usCVE-2024-271616.2all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the encrypted files using tCVE-2024-271626.1Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loadeCVE-2024-271636.5Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests toCVE-2024-271647.1Toshiba printers contain hardcoded credentials. As for the affected products/models/versions, see the reference URL.CVE-2024-271657.8Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges.
CVE-2024-27154: Medium severity, CVSS 6.2 | Vulnix