Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)

• CVE-2024-3498 High 7.8 Incorrect Permission Assignment Privilege Escalation Vulnerability 0.3%
• CVE-2024-3497 High 8.8 Directory Traversal Remote Code Execution Vulnerability 0.7%
• CVE-2024-3496 High 8.8 Authentication Bypass Vulnerability 0.7%
• CVE-2024-27180 Medium 6.7 TOCTOU vulnerability 0.3%
• CVE-2024-27179 Medium 4.7 Session disclosure inside the log files 0.3%
• CVE-2024-27178 High 7.2 Remote Code Execution 1.5%
• CVE-2024-27177 High 7.2 Remote Code Execution 1.5%
• CVE-2024-27176 High 7.2 Remote Code Execution 1.5%
• CVE-2024-27175 Medium 4.4 Local File Inclusion 0.9%
• CVE-2024-27174 Critical 9.8 insecure upload 1.6%
• CVE-2024-27173 Critical 9.8 insecure upload 3.2%
• CVE-2024-27172 Critical 9.8 Remote Code Execution 26.8%
• CVE-2024-27171 High 7.4 Insecure permissions 0.5%
• CVE-2024-27170 High 7.4 Hardcoded credentials for WebDAV access 0.3%
• CVE-2024-27169 High 8.4 Lack of authentication 0.3%
• CVE-2024-27168 High 7.1 Hardcoded keys used to generate authentication cookies 0.3%
• CVE-2024-27167 High 7.4 Insecure permissions 0.2%
• CVE-2024-27166 High 7.4 Insecure permissions 0.2%
• CVE-2024-27165 High 7.8 Local Privilege Escalation 0.2%
• CVE-2024-27164 High 7.1 Hardcoded credentials 0.3%
• CVE-2024-27163 Medium 6.5 Leak of admin password and passwords 0.4%
• CVE-2024-27162 Medium 6.1 DOM-based XSS 21.2%
• CVE-2024-27161 Medium 6.2 Hardcoded password used to encrypt files 0.2%
• CVE-2024-27160 Medium 6.2 Hardcoded password used to encrypt logs and use of weak cipher 0.2%
• CVE-2024-27159 Medium 6.2 Hardcoded password used to encrypt logs 0.3%
• CVE-2024-27158 High 7.4 Hardcoded root password 0.3%
• CVE-2024-27157 Medium 6.8 Leak of authentication sessions in secure logs 0.4%
• CVE-2024-27156 Medium 6.8 Leak of authentication sessions in secure logs 0.4%
• CVE-2024-27155 High 7.7 Local Privilege Escalation and Remote Code Execution using insecure permissions 0.4%
• CVE-2024-27154 Medium 6.2 Passwords are stored in clear-text logs. 0.3%
• CVE-2024-27153 High 7.4 Local Privilege Escalation and Remote Code Execution 0.2%
• CVE-2024-27152 High 7.4 Local Privilege Escalation and Remote Code Execution using insecure permissions 0.2%
• CVE-2024-27151 High 7.4 Local Privilege Escalation and Remote Code Execution using insecure permissions 0.4%
• CVE-2024-27150 High 7.4 Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH 0.2%
• CVE-2024-27149 High 7.4 Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD 0.2%
• CVE-2024-27148 High 7.4 Local Privilege Escalation and Remote Code Execution using insecure PATH 0.2%
• CVE-2024-27147 High 7.4 Local Privilege Escalation and Remote Code Execution using snmpd 0.3%
• CVE-2024-27146 Medium 6.7 Lack of privileges separation 0.2%
• CVE-2024-27145 Critical 9.8 Multiple Post-authenticated Remote Code Execution 1.0%
• CVE-2024-27144 Critical 9.8 Pre-authenticated Remote Code Execution 1.2%
• CVE-2024-27143 Critical 9.8 Pre-authenticated Remote Code Execution 1.1%
• CVE-2024-27142 Medium 5.9 Pre-authenticated XXE injection 0.9%
• CVE-2024-27141 Medium 5.9 Pre-authenticated Time-Based Blind XXE injection 1.1%