CVE-2024-27158

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1392

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-271596.2All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files usCVE-2024-27166.1A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been classified as problematic. This affects an unknownCVE-2024-271606.2All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files usCVE-2024-271616.2all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the encrypted files using tCVE-2024-271626.1Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loadeCVE-2024-271636.5Toshiba printers will display the password of the admin user in clear-text and additional passwords when sending 2 specific HTTP requests toCVE-2024-271647.1Toshiba printers contain hardcoded credentials. As for the affected products/models/versions, see the reference URL.CVE-2024-271657.8Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can get root privileges. CVE-2024-271667.4Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. As for the affected pCVE-2024-271677.4Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local attacker can inject CVE-2024-271687.1It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow attackers to bypass auCVE-2024-271698.4Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in applications, provid
CVE-2024-27158: High severity, CVSS 7.4 | Vulnix